Reasons for failed automatic device encryption: Un-allowed DMA capable

Looking through MSINFO32 I see the line:
Device Encryption Support Reasons for failed automatic device encryption: Un-allowed DMA capable bus/device(s) detected

What does it mean? My laptop C:\ drive is encrypted the whole thing. Does this mean I have a problem?

I have these lines too:
Secure Boot State On
PCR7 Configuration Bound

MSINFO32-09-22-2017.txt

pepanee said:

Device encryption in Windows 10 for OEMs | Microsoft Docs

Scroll down to the section named: "Un-allowed DMA capable bus/device(s) detected".
See if someone else can help you fill out what you need filled out.

Gee, thanks for the info. My Google search results returned crap. Consider that link bookmarked. Doesn't really look like I have too much to worry about. Thanks again.

pepanee said:

Device encryption in Windows 10 for OEMs | Microsoft Docs

purplenate26 said:

Consider that link bookmarked.

Annoyingly it seems that page has already had some of the information (such as hardware requirements for device encryption) removed since that post.

All I know, is that since version 1703, a new group policy was added to block new DMA devices when the computer is locked. This is for Bitlocker only, don’t know about the Home version of device encryption.

Disable New DMA Devices when Computer is Locked.

Do a search for it.

DMA has been an issue for years and finally MS has added a policy for it

win10freak said:

All I know, is that since version 1703, a new group policy was added to block new DMA devices when the computer is locked. This is for Bitlocker only, don’t know about the Home version of device encryption.

Disable New DMA Devices when Computer is Locked.

Do a search for it.

DMA has been an issue for years and finally MS has added a policy for it

Good to know. I read up on it and now I am satisfied I have a good working knowledge of the issue.

guys facing same issue as well have this error in system info and my secure boot is now disabled and stuff any way to fix ?? called ms they just point me to device manufacture , no help at all, the article looks to be removed ??

Tonyb said:

guys facing same issue as well have this error in system info and my secure boot is now disabled and stuff any way to fix ?? called ms they just point me to device manufacture , no help at all, the article looks to be removed ??

Secure boot disabled because you want it that way or it broke? Maybe open a new thread about secure boot. Secure boot and Device Encryption Support Reasons for failed automatic device encryption: Un-allowed DMA capable bus/device(s) detected are different but related. Sounds like your problem deserves a new thread. You'll get better help for your secure boot issue that way.

it broke but is enabled in my bios just not working because of this issue, i have another thread but no possible recourse there, i contacted microsoft who told me it's because of this issue, and i should contact motherboard manufacture i did and they just redirected me to MS again but no go on it.