"Too many PIN entry attempts" error after you enter a BitLocker PIN at Windows startup

Applies to: Windows 10, version 1809Windows Server 2019, all versionsWindows 10 More

Symptoms


After you enter a BitLocker PIN at Windows startup on a new computer that is running an OEM version of Windows, you receive the following error message:
Too many PIN entry attempts

Cause


This issue occurs because the OEM doesn't reset the lockout count before shipping the device.

Workaround


To work around this issue, try the following methods, in no particular order:

  • Input the BitLocker recovery key.
  • Wait until the unlock period expires, and then enter the correct PIN.
  • Reinstall the operating system, and then reset the TPM chip.
  • Unlock the drive or turn off BitLocker. To do this, follow these steps:
    1. At the BitLocker entry screen, press ESC to access other recovery options.
    2. Select the command prompt option.
    3. Enter Manage-bde to either unlock the system drive or turn off BitLocker. To do this, enter the appropriate command, and then press Enter:

      Unlock the system drive

      manage-bde –unlock <DriveLetter>: –recoverypassword <Password>

      manage-bde –unlock <DriveLetter>: –recoverykey <RecoveryKey>
      Turn off BitLocker
      manage-bde –off <DriveLetter>:
      For more information, see the following Technet topics:

      Manage-bde: unlock

      Manage-bde: off
  • Contact the OEM for support. 

More Information


For more information about how to reset the TPM chip, see Reset the TPM Lockout.