Dell laptop docking station Q

Just upgraded to a new Dell Laptop with USB-C docking station / USB Hub thing..

I used to have this style:

But the new laptop uses this one:

Doesn’t seem to work properly at start up – with the old one the keyboard / mouse etc worked via USB at start up so I could enter the Bitlocker Key. With the new one, nothing seems to be connected on the docking station till after I’ve entered the bitlocker key which seems daft as I have to disconnect the keyboard from the docking station and move it to the laptop (which I never open at home as it sits under two 24″ monitors).

Is this me or just a bit of a design oversight?

Hmm, I have used both and I’m currently using the newer one. Are you connected via USB-C? I found when I first plugged in via USB-B it didn’t do all the things that the USB-C connection did.

Are you having to enter the bitlocker key every startup? I don’t think that’s how it should work.

If it’s just a one off I don’t understand the issue.

It connects to the laptop via USB-C and powers the laptop thus.

It just seems the Hub’s USB ports don’t work until after the laptop has fully unhibernated, which it can’t do until I’ve entered the Bitlocker key….

Which is very odd as the Hub is powering the monitors, so it’s obviously connected and talking to the laptop etc…

Are you having to enter the bitlocker key every startup?

That’s how I set it up – was never a problem with the old docking station.

Just means if someone breaks into the house and nicks it, they can’t access anything from it.

I have the ability to switch off whole mobile phone networks around the world from it, so really don’t want it easily accessible…..

Are you having to enter the bitlocker key every startup?

That’s how I set it up

Old hardware have no TPM, so the PIN is enabled on everyboot, this setup is normal. Modern kit can be bitlockered without a PIN.

ignore, my hub is slightly different

Does the new hub have the latest firmware? Up to date using Dell Command update?

Does the new hub have the latest firmware? Up to date using Dell Command update?

Good point – just updating now (although it doesn’t say specifically what).

In a previous gig, I helped roll out new laptops across the company including the latest “docks”/port replicators. Absolute pain in the arse!

Depending on the Dock (is yours the Thunderbolt model?) You may need to update the firmware for the actual dock itself + the dock drivers and make sure you get the very latest video/usb/sound drivers for your laptop as well as it can do all sorts of weird and wonderful stuff. We also had to install the MaxxAudio stuff as we had weird issues when plugging headsets in via the dock.

Well it’s just installed 9 driver updates….

I think it’s Dell Performance Dock – WD19DCS

https://www.dell.com/en-uk/work/shop/dell-performance-dock-wd19dcs/apd/210-azbw/pc-accessories

There may well be precedent drivers needed in order.

Keep checking the dell command update after reboots.

You don’t need to set bit locker to ask for a PW everytime you log in, that’s what your TPM is for. Bit locker is for encypting your drive so it cannot be read by someone simply removing the hdd and plugging into a caddy for exmaple, it’s not designed as ‘better windows password’. I’d bet your issue is a security measure, not an error per-se.

If you want a secure device, use a secure windows password and/or MFA and you won’t have the dock issues. The access to your senstive software for the mobile network infrastructure should really have security of it’s own.

On my WD15 Dell dock I remember having to change some BIOS settings in order to use the keyboard for BitLocker – I guess it’s the settings as per the 3rd post in this thread https://www.dell.com/community/Latitude/WD19TB-usb-not-working-on-startup/td-p/7792660 (was a few years ago I did it though so can’t remember exactly :p ).

I also remember having to firmware update the dock to fix another issue so worth updating the dock’s firmware to the latest available if you haven’t already done so.

What P-Jay said..

You don’t need to set bit locker to ask for a PW everytime you log in, that’s what your TPM is for. Bit locker is for encypting your drive so it cannot be read by someone simply removing the hdd and plugging into a caddy for exmaple, it’s not designed as ‘better windows password’. I’d bet your issue is a security measure, not an error per-se.

Interesting I assumed bit locker was below Windows OS and happened at the hardware level as on my previous laptop it was configured in the Bios and had to be unlocked before the laptop could boot (my wife’s work laptop is also like that). Does mean that security is still only as good as windows OS, which isn’t that impressive.

However the USB-C doc still seems odd, the USB ports don’t seem to work till after the laptop has booted, whereas before they were always up and running as soon as sleep / hibernation ended…

I have the same dock and same bit locker settings on my work (civil service) laptop, ie bitlocker password require every time it boots.
The usb keyboard and mouse work for inputting the bitlocker password though so it’s definitely possible.

I have same situation, irritating but not end of the world to use laptop keyboard to enter bitlocker key on reboot. though am rebooting more often these days to keep up with security updates… hopefully no need to tell this crowd of the importance in current climate to keep up with updates!

Interesting dilemma the pin on boot thing, as pointed out bitlocker protects from the HD being fiddled with outside the machine.
When the machine is under the control of the OS, post pin unlock in your case, the drive is unencrypted including when in sleep mode.
At this point it’s the windows password keeping it safe or some other credential bio or card or whatever.

So I guess it’s at what point you think the laptop is going to get nicked and then what point of attack they are going to use.

Personally I don’t bother with the pin as it’s a pita, and doesn’t really add that much.

The pin isn’t the encryption key, that’s stored in the TPM, it’s just something else to remember or write on a post it stuck to the keyboard.