Software⏱️ 3 min read📅 2026-06-15

How to Fix 0x80310031 Error – Bitlocker + TPM + PIN + error code 0x80310031

Bitlocker error code 0x80310031: unable to add PIN protection due to existing TPM+PIN setup.

Quick Answer: Check if the TPM and PIN settings are correctly configured in group policy, and try removing or disabling the existing protector before adding a new one.

Error code 0x80310031 occurs when attempting to add PIN protection to BitLocker-protected drives that have already been configured with TPM (Trusted Platform Module) and PIN. This issue affects users who have previously set up TPM+PIN BitLocker but now want to modify their settings or add an additional key protector.

This error can be frustrating, especially when trying to implement a more secure drive protection method. However, by following the steps outlined in this guide, you should be able to resolve the issue and successfully configure your BitLocker setup with TPM+PIN.

💡 Why You Are Getting This Error

  • The primary reason for this error is that only one key protector of a specific type (TPM) can be added to a drive. When you try to add another TPM key protector, Windows detects that it's an attempt to add multiple TPM protectors and prevents the action, resulting in the 0x80310031 error code.
  • Another possible cause is that the TPM chip on your computer may not support PIN-based encryption. If this is the case, you won't be able to add a PIN key protector even if you've previously set up TPM+PIN BitLocker.

✅ Best Solutions to Fix It

Reconfigure Group Policy Settings

  1. Step 1: Open the Group Policy Editor and navigate to the Computer Configuration section. Find the 'BitLocker' policy and select it.
  2. Step 2: In the 'BitLocker' settings, look for the 'Key Protectors' section and ensure that only one key protector of the type you're trying to add (TPM) is selected. If multiple key protectors are listed, delete them and try adding the new protector again.
  3. Step 3: Save your changes and restart your computer. This should allow you to proceed with adding a PIN key protector without encountering the 0x80310031 error code.

Disable TPM Key Protector

  1. Step 1: Open the Command Prompt as an administrator and navigate to the drive you want to protect (e.g., C:)
  2. Step 2: Run the following command to disable the existing TPM key protector: manage-bde -keyprotectors disable c:
  3. Step 3: After disabling the TPM key protector, you should be able to add a new PIN key protector without encountering the 0x80310031 error code. However, keep in mind that this method may compromise your drive's security if not done correctly.

💡 Conclusion

To resolve the BitLocker+TPM+PIN error code 0x80310031, try reconfiguring your Group Policy settings or disabling the existing TPM key protector and then adding a new PIN key protector. By following these steps, you should be able to successfully configure your drive protection method while maintaining its security.

Did this fix your problem?

If not, try searching for specific error codes.

🔍 Search Error Database

❓ Frequently Asked Questions