none
BitLocker not working in Windows 2008 R2 Server

    Question

  • I am  having issues with implementing bitlocker on a Dell T420 Server running Win2k8R2 with all updates patched to date (9_24_2013).

    TPM is implemented and running according to tmp.msc

    System Partition is 99.9MB

    OS is  installed on C: 195 GB parition

    Both partitiions are on Drive 1, Raid 10, 557.GB

    When I go to implement on Drive C I get the following Error:

    "The path specified in the Boot Configuration Data (BCD) for a Bitlocker Drive Enryption itegrity protected application is incorrect. Please verify and correct your BCD settings and Try again"

    Edited BCD  with BCDedit and made sure that boot pointed to drive C as well as hibernation ( as per http://support.microsoft.com/kb/929834/en-us).

    I have now tried and rebooted computer at least half a dozen times to get this implemented without any luck.

    ..Any help would be appreciated.

    Thanks


    jawsurgeon

    Wednesday, September 25, 2013 3:25 PM

All replies

  • I also removed the  KB2799926 Windows update ...which seemed to resolve the issue in another forum post..

    But this also did not work and resulted in the same exact error message after reboot of system....

    Another try at BCDedit...did not help.

    TPM is on and ownership is verified.


    jawsurgeon

    Wednesday, September 25, 2013 3:27 PM
  • I also removed the  KB2799926 Windows update ...which seemed to resolve the issue in another forum post..

    But this also did not work and resulted in the same exact error message after reboot of system....

    Another try at BCDedit...did not help.

    TPM is on and ownership is verified.


    jawsurgeon


    Run bcdedit -enum all and then post the results.
    Wednesday, September 25, 2013 5:38 PM
  • Here is the output of bcdedit


    C:\Users\aorden.JAWSURGEON>bcdedit -enum all

    Windows Boot Manager
    --------------------
    identifier              {bootmgr}
    device                  partition=C:
    description             Windows Boot Manager
    locale                  en-US
    inherit                 {globalsettings}
    default                 {current}
    resumeobject            {58f21246-cc93-11e1-97de-dec6a940555e}
    displayorder            {current}
                            {384c1467-ae84-11e2-9ed5-e0db5500be80}
    toolsdisplayorder       {memdiag}
    timeout                 10

    Windows Boot Loader
    -------------------
    identifier              {384c1467-ae84-11e2-9ed5-e0db5500be80}
    device                  ramdisk=[C:]\Srd\sources\boot.wim,{ramdiskoptions}
    description             Symantec LightsOut Restore
    osdevice                ramdisk=[C:]\Srd\sources\boot.wim,{ramdiskoptions}
    systemroot              \windows
    detecthal               Yes
    winpe                   Yes
    ems                     No

    Windows Boot Loader
    -------------------
    identifier              {current}
    device                  partition=C:
    path                    \Windows\system32\winload.exe
    description             Windows Server 2008 R2
    locale                  en-US
    inherit                 {bootloadersettings}
    recoverysequence        {58f21248-cc93-11e1-97de-dec6a940555e}
    recoveryenabled         Yes
    osdevice                partition=C:
    systemroot              \Windows
    resumeobject            {58f21246-cc93-11e1-97de-dec6a940555e}
    nx                      OptOut

    Windows Boot Loader
    -------------------
    identifier              {58f21248-cc93-11e1-97de-dec6a940555e}
    device                  ramdisk=[C:]\Recovery\58f21248-cc93-11e1-97de-dec6a940555e\Winre.wim,{58f21249-cc93-11e1-97de-de
    c6a940555e}
    path                    \windows\system32\winload.exe
    description             Windows Recovery Environment
    inherit                 {bootloadersettings}
    osdevice                ramdisk=[C:]\Recovery\58f21248-cc93-11e1-97de-dec6a940555e\Winre.wim,{58f21249-cc93-11e1-97de-de
    c6a940555e}
    systemroot              \windows
    nx                      OptIn
    winpe                   Yes

    Resume from Hibernate
    ---------------------
    identifier              {58f21246-cc93-11e1-97de-dec6a940555e}
    device                  partition=C:
    path                    \Windows\system32\winresume.exe
    description             Windows Resume Application
    locale                  en-US
    inherit                 {resumeloadersettings}
    filedevice              partition=C:
    filepath                \hiberfil.sys
    debugoptionenabled      No

    Windows Memory Tester
    ---------------------
    identifier              {memdiag}
    device                  partition=C:
    path                    \boot\memtest.exe
    description             Windows Memory Diagnostic
    locale                  en-US
    inherit                 {globalsettings}
    badmemoryaccess         Yes

    EMS Settings
    ------------
    identifier              {emssettings}
    bootems                 Yes

    Debugger Settings
    -----------------
    identifier              {dbgsettings}
    debugtype               Serial
    debugport               1
    baudrate                115200

    RAM Defects
    -----------
    identifier              {badmemory}

    Global Settings
    ---------------
    identifier              {globalsettings}
    inherit                 {dbgsettings}
                            {emssettings}
                            {badmemory}

    Boot Loader Settings
    --------------------
    identifier              {bootloadersettings}
    inherit                 {globalsettings}
                            {hypervisorsettings}

    Hypervisor Settings
    -------------------
    identifier              {hypervisorsettings}
    hypervisordebugtype     Serial
    hypervisordebugport     1
    hypervisorbaudrate      115200

    Resume Loader Settings
    ----------------------
    identifier              {resumeloadersettings}
    inherit                 {globalsettings}

    Device options
    --------------
    identifier              {58f21249-cc93-11e1-97de-dec6a940555e}
    description             Ramdisk Options
    ramdisksdidevice        partition=C:
    ramdisksdipath          \Recovery\58f21248-cc93-11e1-97de-dec6a940555e\boot.sdi

    Setup Ramdisk Options
    ---------------------
    identifier              {ramdiskoptions}
    description             Symantec LightsOut Restore
    ramdisksdidevice        boot
    ramdisksdipath          \boot\boot.sdi


    jawsurgeon

    Friday, September 27, 2013 9:19 PM
  • I tried this solution and it did not work.

    jawsurgeon

    Tuesday, October 01, 2013 1:55 PM
  • please back up the bcd file first. Then try the following commands:

    "bcdedit -set {current} device partition=C:"

    "bcdedit -set {current} osdevice partition=C:"


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    Saturday, October 05, 2013 8:10 AM
  • No...I haven't had time to test the latest suggestion...and I am out of town for the next two weeks...so unfortunately this is going to wait until I return after Oct 26th.

    ..thanks for your patience.

    adam


    jawsurgeon

    Friday, October 11, 2013 3:22 AM
  • Any update about the issue? Jawsurgeon

    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

    Tuesday, November 12, 2013 8:27 AM
  • thanks for your patience...going to try thiis morning.


    jawsurgeon

    Tuesday, November 12, 2013 1:24 PM
  • I entered the new bcdedit commands; both commands executed successfully; rebooted server; 

    Bitlocker fails  initialize with same error as before.

    ..Here again is the output of bcdedit -enum all

    __________________________________________

    Windows PowerShell
    Copyright (C) 2009 Microsoft Corporation. All rights reserved.

    PS C:\Users\aorden.JAWSURGEON> bcdedit -enumall
    An unknown command was specified.
    Run "bcdedit /?" for command line assistance.
    PS C:\Users\aorden.JAWSURGEON> bcdedit -enum all

    Windows Boot Manager
    --------------------
    identifier              {bootmgr}
    device                  partition=C:
    description             Windows Boot Manager
    locale                  en-US
    inherit                 {globalsettings}
    default                 {current}
    resumeobject            {58f21246-cc93-11e1-97de-dec6a940555e}
    displayorder            {current}
                            {384c1467-ae84-11e2-9ed5-e0db5500be80}
    toolsdisplayorder       {memdiag}
    timeout                 10

    Windows Boot Loader
    -------------------
    identifier              {384c1467-ae84-11e2-9ed5-e0db5500be80}
    device                  ramdisk=[C:]\Srd\sources\boot.wim,{ramdiskoptions}
    description             Symantec LightsOut Restore
    osdevice                ramdisk=[C:]\Srd\sources\boot.wim,{ramdiskoptions}
    systemroot              \windows
    detecthal               Yes
    winpe                   Yes
    ems                     No

    Windows Boot Loader
    -------------------
    identifier              {current}
    device                  partition=C:
    path                    \Windows\system32\winload.exe
    description             Windows Server 2008 R2
    locale                  en-US
    inherit                 {bootloadersettings}
    recoverysequence        {58f21248-cc93-11e1-97de-dec6a940555e}
    recoveryenabled         Yes
    osdevice                partition=C:
    systemroot              \Windows
    resumeobject            {58f21246-cc93-11e1-97de-dec6a940555e}
    nx                      OptOut

    Windows Boot Loader
    -------------------
    identifier              {58f21248-cc93-11e1-97de-dec6a940555e}
    device                  partition=C:
    path                    \windows\system32\winload.exe
    description             Windows Recovery Environment
    inherit                 {bootloadersettings}
    osdevice                ramdisk=[C:]\Recovery\58f21248-cc93-11e1-97de-dec6a940555e\Winre.wim,{58f21249-cc93-11e1-97de-de
    c6a940555e}
    systemroot              \windows
    nx                      OptIn
    winpe                   Yes

    Resume from Hibernate
    ---------------------
    identifier              {58f21246-cc93-11e1-97de-dec6a940555e}
    device                  partition=C:
    path                    \Windows\system32\winresume.exe
    description             Windows Resume Application
    locale                  en-US
    inherit                 {resumeloadersettings}
    filedevice              partition=C:
    filepath                \hiberfil.sys
    debugoptionenabled      No

    Windows Memory Tester
    ---------------------
    identifier              {memdiag}
    device                  partition=C:
    path                    \boot\memtest.exe
    description             Windows Memory Diagnostic
    locale                  en-US
    inherit                 {globalsettings}
    badmemoryaccess         Yes

    EMS Settings
    ------------
    identifier              {emssettings}
    bootems                 Yes

    Debugger Settings
    -----------------
    identifier              {dbgsettings}
    debugtype               Serial
    debugport               1
    baudrate                115200

    RAM Defects
    -----------
    identifier              {badmemory}

    Global Settings
    ---------------
    identifier              {globalsettings}
    inherit                 {dbgsettings}
                            {emssettings}
                            {badmemory}

    Boot Loader Settings
    --------------------
    identifier              {bootloadersettings}
    inherit                 {globalsettings}
                            {hypervisorsettings}

    Hypervisor Settings
    -------------------
    identifier              {hypervisorsettings}
    hypervisordebugtype     Serial
    hypervisordebugport     1
    hypervisorbaudrate      115200

    Resume Loader Settings
    ----------------------
    identifier              {resumeloadersettings}
    inherit                 {globalsettings}

    Device options
    --------------
    identifier              {58f21249-cc93-11e1-97de-dec6a940555e}
    description             Ramdisk Options
    ramdisksdidevice        partition=C:
    ramdisksdipath          \Recovery\58f21248-cc93-11e1-97de-dec6a940555e\boot.sdi

    Setup Ramdisk Options
    ---------------------
    identifier              {ramdiskoptions}
    description             Symantec LightsOut Restore
    ramdisksdidevice        boot
    ramdisksdipath          \boot\boot.sdi
    PS C:\Users\aorden.JAWSURGEON>

    Adam


    jawsurgeon


    • Edited by Jawsurgeon Tuesday, November 12, 2013 1:56 PM
    Tuesday, November 12, 2013 1:46 PM