BitLocker Error 0XC0210001: Volume Fully Decrypted Fix

When This Error Hits

You turn on a Windows 10 or 11 machine — usually a Dell Latitude, Lenovo ThinkPad, or HP EliteBook — and instead of the login screen, you get a black screen with a cursor or a blue screen that says STATUS_FVE_NOT_ENCRYPTED (0XC0210001). The full message reads: "The volume is fully decrypted and no key is available."

I've seen this most often after someone intentionally decrypted their drive through BitLocker settings (maybe to avoid a password prompt), or after a failed Windows update that partially reset encryption state. Also happens when you clone a BitLocker-protected drive and forget to suspend encryption first. Last month, a client's office manager did exactly that—moved her C drive to a new SSD, hit this error, and couldn't get past it.

Root Cause in Plain English

BitLocker uses a two-state system: encrypted or not. When you decrypted the volume (either intentionally or through a botched process), Windows removed the encryption key from the drive but left the BitLocker metadata intact. The bootloader then looks for a key, finds nothing, and throws this error. It's like a locked door that someone took the lock off—the frame still expects a key, but there's nothing to turn.

The fix is to boot into a recovery environment and either tell BitLocker the volume is clear, or force a key bypass. You can't just ignore it—Windows won't boot.

The Fix: Step by Step

You'll need a Windows installation USB (same version as your OS, 10 or 11). If you don't have one, create it on another PC using the Media Creation Tool from Microsoft's site.

Step 1: Boot from the Windows USB

1. Plug in the USB, restart the machine.
2. Boot from the USB (tap F12, F2, or Esc during startup—varies by manufacturer).
3. On the setup screen, choose Repair your computer (lower-left corner).
4. Select Troubleshoot → Advanced Options → Command Prompt.

Step 2: Identify the Problem Drive

At the command prompt, type:

diskpart
list volume

Look for the volume with no drive letter (often a 100MB system partition) and the volume where Windows is installed (usually C: or D:). Note the volume numbers. I'll assume C: is your Windows volume.

Type exit to leave diskpart.

Step 3: Check BitLocker Status

Run:

manage-bde -status C:

If you see "Conversion Status: Fully Decrypted" and "Protection Status: Off", you're in the right place. If it says "Encrypted" or "Protection On", skip to the alternate fix below.

Step 4: Clear the BitLocker Metadata

This is the part that actually fixes it. Run:

manage-bde -off C:

Wait—this command normally encrypts or decrypts, but since the volume is already decrypted, it clears the metadata. You'll see "Decryption is in progress." That's misleading; it's actually removing the protection state.

Then verify:

manage-bde -status C:

You should see "Conversion Status: Fully Decrypted" and "Protection Status: Protection Off". If it's still showing a key protector, run:

manage-bde -protectors -disable C:

Step 5: Fix Boot Configuration

Sometimes the bootloader still expects the BitLocker check. Run:

bcdedit /set {default} device partition=C:
bcdedit /set {default} osdevice partition=C:
nbcdedit /set {bootmgr} device partition=C:
bootrec /rebuildbcd

When prompted to add the installation, type Y and press Enter.

Step 6: Reboot

Type exit, close Command Prompt, choose Continue (or restart). Remove the USB. Windows should boot normally.

If the Error Still Shows

Two things I've seen trip people up:

• TPM still thinks it owns the key. Go back to the Command Prompt from the USB and run:

manage-bde -protectors -disable C:

Reboot again. If it fails, clear the TPM from BIOS (look for "Clear TPM" or "Reset TPM" in Security settings—varies by manufacturer). Warning: This wipes TPM data, so any other services using it (like Windows Hello) will need re-setup.

• Firmware bug. On some Dell and HP models, the firmware ignores the decryption status. Update the BIOS/UEFI to the latest version. I've fixed three Lenovo T480s this way—firmware update alone resolved it.

If nothing works, the drive might be corrupted. Boot from the USB again, go to Repair your computer → Troubleshoot → Reset this PC with the option to keep files. That's a last resort, but it'll get you back.

Quick note: If the drive is physically fine and you just want to bypass BitLocker because you forgot the key, this fix won't help—you need the recovery key from your Microsoft account or AD. This fix is specifically for the "decrypted but still locked" scenario.