When using older versions of Symantec Drive Encryption or Symantec Endpoint Encryption with Surface Pro 4 devices, encryption may fail, or the device may be rendered non-bootable.
Symantec has confirmed that this is due to an issue in the older versions of their encryption products. For more information, please see the Symantec article linked in the "More Information" section below.
Customers can prevent this problem from occurring by upgrading to the latest versions of Symantec Drive Encryption or Symantec Endpoint Encryption:
Symantec Drive Encryption 10.4 MP1HF1 or later
Symantec Endpoint Encryption 11.1.1 MP2 or later
For more information please see the following Symantec article: https://support.symantec.com/en_US/article.TECH235669.html