Sometimes it just doesn't pay to disable stuff in BIOS. I recently had problems enabling Bitlocker on some Latitude 7440 units. After the initial reboot the error would pop up saying that the bitlocker encryption key cannot be obtained. So I checked the usual suspects - clearing the TPM, making sure the TPM was recognized in device manager, etc. And then I remembered the USB settings that we'd changed to lock down the laptops more.
Specifically under System Configuration, USB Configuration, "Enable Boot Support" which had been disabled just to make sure our users wouldn't be able to boot off USB devices. I wouldn't have equated that bitlocker error with that setting but as soon as we undid it on the laptops we were able to enable bitlocker.