0XC0210004

Fix 0XC0210004: BitLocker can't encrypt this partition

Cybersecurity & Malware Beginner 👁 1 views 📅 Jul 16, 2026

BitLocker won't encrypt a drive if the file system isn't supported. Usually means NTFS is missing or the drive is FAT32. Here's how to fix it.

Quick answer for advanced users

Convert the drive to NTFS using convert X: /fs:ntfs in Command Prompt (as admin). Then enable BitLocker again. The error means the partition uses FAT32, exFAT, or another unsupported file system.

Why this happens

BitLocker only works with NTFS, FAT32, or exFAT on data drives? No, that's wrong. Actually, BitLocker only works with NTFS for system drives (like C:) and for data drives it needs NTFS or ReFS. FAT32 and exFAT won't work. The error code 0XC0210004 means BitLocker checked the file system and said "Sorry, can't encrypt this."

I had a client last month who bought a new external drive for backup. Plugged it in, tried to turn on BitLocker, got this error. The drive came formatted as exFAT from the factory. Took me 5 minutes to convert it.

Another common trigger: you're trying to encrypt the small System Reserved partition (usually 100MB or 500MB). That partition is often FAT32, and BitLocker won't touch it. But you don't need to encrypt that one anyway.

Step-by-step fix

  1. Check the drive letter – Open File Explorer, note the drive letter you're trying to encrypt (e.g., E:).
  2. Check the file system – Right-click the drive, choose Properties. Under the General tab, look for "File system:". If it says FAT32 or exFAT, that's the problem.
  3. Open Command Prompt as admin – Press Win+X, choose "Command Prompt (Admin)" or "Terminal (Admin)".
  4. Run the convert command – Type convert X: /fs:ntfs (replace X with your drive letter). Press Enter. It'll ask for volume label if there's one. Type it, press Enter.
  5. Wait for conversion – This takes anywhere from a few seconds to several minutes, depending on drive size and how full it is. The command won't erase your files – it just changes the file system.
  6. Enable BitLocker – Once done, right-click the drive, choose "Turn on BitLocker", and follow the wizard.

What if the main fix doesn't work?

Sometimes the conversion fails because the drive has bad sectors or is full. Here's what to try:

  • Free up space – Delete junk files or move them off the drive. BitLocker needs some free space for its metadata.
  • Run CHKDSK first – Type chkdsk X: /f in Command Prompt (admin) to fix errors, then retry the convert command.
  • Backup and reformat – If conversion still fails, copy all files off the drive, then format it as NTFS using Disk Management (right-click Start > Disk Management, right-click the partition, choose Format, select NTFS). Yes, this wipes the drive, so backup first.
  • Check if it's the System Reserved partition – Drives labeled "System Reserved" or "EFI System Partition" are often FAT32. You don't need to encrypt those. BitLocker handles the boot partition automatically.

Prevention tip

Before you buy a new drive or plug in a USB stick, check the file system. If it's exFAT or FAT32, convert it to NTFS before you store important files. That way, BitLocker works when you need it. Also, if you're setting up a new Windows install, make sure the C: drive is NTFS from the start – Windows Setup does this by default, but some custom partitioning tools can mess it up.

One more thing: if you're using Windows 10 Home or Windows 11 Home, BitLocker isn't included. You won't see this error because the feature doesn't exist. You'd need Pro or Enterprise. So don't waste time if that's your OS version.

Was this solution helpful?