Bitlocker on Proliant G10 - Server 2022 core

[Adam365]

Hi,
We're struggling to get bitlocker active on our Proliant gen 10 server running MS Server 2022 core.
We updated to the latest firmware, enabled TPM, secure boot, uefi in the BIOS.
Unfortunately we still get an error via msinfo32 :
BIOS Mode : EUFI
PCR7 Configuration : binding disabled by policy
Device encryption support : Reasons for failed automatic device encryption: Feature is not available, PCR7 binding is not supported. Un-allowed DMA capable bus/device(s) detected

We already tried to remove all certificates in the BIOS, except the KEK 2K CA2023
Removed the one from HPE, Suse, MS 2011 cert..

[PR7]

Greetings!

Looks like you have already performed all relevant hardware-level checks and firmware updates
"latest firmware, enabled TPM, secure boot, uefi in the BIOS"

Despite these steps, BitLocker cannot be enabled due to the following issues reported via msinfo32:
PCR7 Configuration: Binding disabled by policy
Device Encryption Support: "Feature is not available, PCR7 binding is not supported. Un-allowed DMA capable bus/device(s) detected"
  
Advising if any OS-level policy or configuration may be interfering with PCR7 or BitLocker
we would appreciate if you could help raise a support case with Microsoft for further investigation.

[PR7]

Hello,
Let us know if you were able to resolve the issue.
If you have no further query, and you are satisfied with the answer then kindly mark the topic as Solved so that it is helpful for all community members.