Fix BitLocker Setup Failed to Export the BCD Store

If you see “BitLocker Setup failed to export the BCD store” on Windows 10, the fix is to clear the existing BitLocker keys and repartition the system drive, or use the command-line tool manage-bde to reset the drive preparation. This error typically appears during initial BitLocker enablement, not after encryption has started, and it is almost always caused by a missing or improperly configured Boot Configuration Data (BCD) store on the system partition.

What the BCD Store Is and Why BitLocker Needs It

The Boot Configuration Data (BCD) store is a small database that Windows uses to manage boot options. It contains entries for the Windows boot manager, the operating system loader, and any other bootable tools. When you enable BitLocker, Windows must modify the BCD to add a boot manager entry that can read the encryption key from the TPM (Trusted Platform Module) or a USB drive. If the BCD store is missing, corrupted, or not on the expected partition, the setup process cannot write this entry, and it aborts with the “failed to export the BCD store” error.

This is not the same as a BitLocker recovery key prompt or a drive that is already encrypted. The error appears in a dialog box during the “Preparing your drive for BitLocker” phase, usually seconds after you click “Turn on BitLocker.” The drive itself is still fully accessible, and no data is at risk, but BitLocker cannot proceed until the BCD is repaired.

Why the BCD Store Gets Corrupted or Missing

The most common cause is that the system partition (the small, usually 100–500 MB partition marked as “System”) does not contain a valid BCD store. This can happen if you cloned a disk, restored a system image to a different drive, or used third-party partitioning tools that resized or removed the system partition. Another frequent cause is a previous failed BitLocker attempt that left the BCD in an inconsistent state—Windows may have partially written a new entry and then rolled back, leaving a corrupted file.

Less common but possible causes include a damaged boot sector, a UEFI firmware that is not set to boot from the correct partition, or a system drive that was converted from MBR to GPT without properly recreating the BCD. In some cases, the error appears on machines that have Secure Boot enabled but the TPM is not initialized, though that usually produces a different message about TPM initialization rather than a BCD export failure.

Method 1: Clear Existing BitLocker Keys and Retry

Before you try more invasive repairs, attempt the simplest fix: remove any partial BitLocker configuration and let Windows start fresh. Open an elevated Command Prompt (right-click Start, choose “Command Prompt (Admin)” or “Windows PowerShell (Admin)”) and run:

Type manage-bde -status and press Enter. Look for the drive letter of your system drive (usually C:). If it shows “Protection Off,” no encryption has started.
Type manage-bde -protectors -delete C: -type TPM (replace C: with your system drive letter) to remove any TPM protectors that may have been added.
Type manage-bde -off C: to ensure encryption is completely off.
Reboot the machine and try enabling BitLocker again from Control Panel or Settings.

If the error persists, the BCD store itself is likely damaged. Proceed to Method 2.

Method 2: Rebuild the BCD Store with Bootrec

You can rebuild the BCD store using the bootrec tool from the Windows Recovery Environment. This is a safe operation that does not touch your personal files, but it will rewrite boot configuration entries. Here is how:

Boot from your Windows 10 installation USB or recovery drive. If you do not have one, you can create it from another PC using the Media Creation Tool.
On the first screen, click “Next,” then “Repair your computer.”
Go to Troubleshoot → Advanced Options → Command Prompt.
Type the following commands, pressing Enter after each:
bootrec /fixmbr
bootrec /fixboot
bootrec /rebuildbcd
If bootrec /rebuildbcd finds a Windows installation, it will ask if you want to add it to the boot list. Type Y and press Enter.
Exit the command prompt and restart normally.

If bootrec /rebuildbcd reports “Total identified Windows installations: 0,” you may need to use the bcdedit command to manually create a new store. That is more advanced, but the same recovery command prompt can be used. Type bcdedit /export C:\BCD_Backup to back up the existing store (even if it is corrupted), then ren C:\Boot\BCD BCD.old to rename it, and finally bootrec /rebuildbcd again.

Method 3: Repartition the System Drive

If the BCD store is missing because the system partition is too small or does not exist, you may need to recreate it. This is more involved and requires careful disk management. The system partition must be at least 100 MB for UEFI (usually 260–500 MB) and must be formatted as FAT32 for UEFI or NTFS for legacy BIOS. You can check your current layout in Disk Management (right-click Start → Disk Management). Look for a partition labeled “System” or “EFI.” If it is missing, you can shrink your main partition and create a new one, but this is risky and should be done with a full backup.

For most users, the safer route is to use a third-party partitioning tool that can create a system partition without losing data, but the built-in Windows tools do not offer a simple “add system partition” option. If you are not comfortable with disk management, consider using the “Reset this PC” feature with the “Keep my files” option, which will reinstall Windows and recreate the BCD store automatically. This will remove installed applications, but it is a reliable last resort.

Common Mistakes and Misconceptions

One common mistake is assuming the error means your drive is encrypted or that you have lost data. It does not—BitLocker has not started, and your files are untouched. Another mistake is running bootrec /fixboot on a UEFI system without first checking that the system partition is active and has the correct file system. If you are on a UEFI machine, the system partition must be FAT32; if it is NTFS, Windows may not boot after the fix.

Some users try to disable Secure Boot or change TPM settings in BIOS, but that rarely helps with this specific error. The BCD export failure is a software-level problem, not a hardware one. Also, do not attempt to manually copy a BCD file from another computer—the store is hardware-specific and may contain incorrect identifiers.

Finally, note that BitLocker is not available on Windows 10 Home. If you are on Home edition, you will not see the BitLocker option in Control Panel; you would need to upgrade to Pro or Enterprise. The error message itself only appears on editions that support BitLocker.

Frequently Asked Questions

Will I lose my data if I rebuild the BCD store?

No. Rebuilding the BCD store only rewrites boot configuration files. Your personal files, applications, and settings remain intact. However, it is always wise to back up important data before running any recovery commands, just in case something unexpected happens.

Can I fix this without a Windows installation USB?

Yes, if you can boot into Windows normally. You can open an elevated command prompt and run bootrec commands, but they may not work if the BCD is severely corrupted. If Windows does not boot, you will need a USB or recovery drive.

Why does the error say “failed to export” instead of “failed to create”?

The wording is misleading. BitLocker first exports the existing BCD store to a temporary file before modifying it. If the store is missing or unreadable, the export step fails, even though the real problem is that the store cannot be read. The fix is the same: rebuild or repair the BCD.

Does this error affect the TPM or my hardware?

No. The error is purely software-related. Your TPM is likely fine. However, after fixing the BCD, you may need to initialize the TPM if it was never used before. You can do this in the TPM Management console (tpm.msc) or via BIOS settings.

Can I use BitLocker without a TPM?

Yes, but you must enable the “Allow BitLocker without a compatible TPM” policy. This is a group policy setting that allows you to use a USB startup key instead. The BCD export error can still occur in this mode, and the same repair methods apply.

What if none of these methods work?

If you have tried clearing protectors, rebuilding the BCD, and repartitioning, and the error persists, the last reliable option is to perform a repair install of Windows 10 using the “Reset this PC” feature. This reinstalls the operating system while keeping your personal files. If that also fails, a clean installation is the final fallback.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →