How To Resolve Sophos TPM PIN Issue For Surface Pro PCs

Users who are using Microsoft Surface Pro PCs or other slate type devices might face an issue saying “TPM Pin could not be created”. Follow the bellow instruction to fix it.

PLEASE NOTE that you must be logged into the PC through an account that has local administrator privileges.  If you are not sure how to do this, or do not have such access, please ask your IT administrator before proceeding.

1. Right-click on the Windows logo and click Run.
   • 
2. Type gpedit.msc and hit Enter.
   • 
3. Local Group Policy Editor window will open.
4. Navigate to Operating System Drives [ Computer Configuration > Administrative Templates > Windows Components > Bitlocker Drive Encryption > Operating System Drives ].
   • 
5. Find Enable Use of BitLocker authentication requiring preboot…
6. Double click on it
7.  Change the settings from Not Configured to Enabled.
   • 
8. Click Apply.
9. Restart the PC.
10. Once the PC boots up open Sophos Endpoint.
11. Within a few seconds, it will ask you for the TPM key again.