none
Boot problems after Bitlocker RRS feed

  • Question

  • Dear All,

    We are installing BitLocker with MBAM in our company. Until now we have experienced two laptops with boot problems.

    - One laptop was encrypted last Wednesday and today morning the laptop alert to run chdsk at boot up. The user was not asked to enter the recovery key. After chdsk ran, the computer restarted the Windows 7 boot logo was shown followed by a blue screen. The blue screen only displayed some codes, no real hint for a driver problem. After that we removed the hard drive and attached it as an external drive to another computer. The hard drive was recognized and after entering the unlock key we were able to save the important data. After that we inserted the hard drive in the Laptop again and tried to reboot. Here is the weird part, the BIOS didn't recognize the hard drive. After a few attempts the BIOS saw the hard drive again and the laptop booted and we could enter into the repair tools with F8. We were asked for the unlock key. I selected the "last good configuration" and the laptop were able to boot and I could log in. But the network card driver was not recognized and all network Win7 services didn't start. Well I was able to fix the network driver issue but not the service issue. I noticed the computer name was suddenly mixed up. The local accounts were not showing the computer name as stated in the system. 

    -The other laptop stopped suddenly with the encryption last Fridy (I noticed a log entry today). What happens after the laptop was rebooted the computer didn't asked for the unlock key, but had the same issue, it started, Win7 logo displayed, and the blue screen appeared. The Dell diagnose showed a hard drive issue. But today the laptop started normal and no real issue can be seen.

    Well, I'm not sure if this is only bad luck and not really related to BitLocker. But  it was the only recent change.

    Some questions:

    1. When Win7 logo appears at boot up, this indicates there is no issue with the master boot record. Right?

    2. I guess when there is a boot issue, but BitLocker doesn't ask for the unlock key the hard drive was unlocked okay. Right?

    The laptops in questions are Dell Latitude E6440. We use BitLocker with the TPM chip, but no startup PIM is required.

    Any other inputs to my questions are highly appreciated.

    Thanks,

    Edy

      


    Edy from Switzerland

    Tuesday, November 12, 2013 8:06 PM

Answers

  • Hi Edy,

    Thanks for your post.

    Firstly, please use the system repair disc:

    1. Insert the system repair disc into your CD or DVD drive.

    2. Restart your computer using the computer's power button.

    3. If prompted, press any key to start the computer from the system repair disc.

    4. Choose your language settings, and then click Next.

    5. Select a recovery option, and then click Next.

    Answer to your question:

    =================

    Question one:

    Yes, when Windows 7 logo appears at boot up, it indicates there is no issue with the master boot record.

    Question two:

    It's up to your encrypt type.

    TPM-only. Using TPM-only validation does not require any interaction with the user to decrypt and provide access to the drive. If the TPM validation succeeds, the user logon experience is the same as a standard logon. If the TPM is missing or changed, or if the TPM detects changes to critical operating system startup files, Bitlocker enters its recovery mode, and you need a recovery password to regain access to the data.

    TPM with PIN. In addition to the protection provided by the TPM, BitLocker requires a personal identification number (PIN) to be entered by the user. Data on the encrypted volume cannot be accessed without entering the PIN.

    For more detailed information, please refer to the following article:

    Learn more about BitLocker Drive Encryption

    http://windows.microsoft.com/en-in/windows7/learn-more-about-bitlocker-drive-encryption

    If you have any feedback on our support, please click here


    Karen Hu
    TechNet Community Support

    Wednesday, November 13, 2013 6:29 AM
    Moderator

All replies

  • Hi Edy,

    Thanks for your post.

    Firstly, please use the system repair disc:

    1. Insert the system repair disc into your CD or DVD drive.

    2. Restart your computer using the computer's power button.

    3. If prompted, press any key to start the computer from the system repair disc.

    4. Choose your language settings, and then click Next.

    5. Select a recovery option, and then click Next.

    Answer to your question:

    =================

    Question one:

    Yes, when Windows 7 logo appears at boot up, it indicates there is no issue with the master boot record.

    Question two:

    It's up to your encrypt type.

    TPM-only. Using TPM-only validation does not require any interaction with the user to decrypt and provide access to the drive. If the TPM validation succeeds, the user logon experience is the same as a standard logon. If the TPM is missing or changed, or if the TPM detects changes to critical operating system startup files, Bitlocker enters its recovery mode, and you need a recovery password to regain access to the data.

    TPM with PIN. In addition to the protection provided by the TPM, BitLocker requires a personal identification number (PIN) to be entered by the user. Data on the encrypted volume cannot be accessed without entering the PIN.

    For more detailed information, please refer to the following article:

    Learn more about BitLocker Drive Encryption

    http://windows.microsoft.com/en-in/windows7/learn-more-about-bitlocker-drive-encryption

    If you have any feedback on our support, please click here


    Karen Hu
    TechNet Community Support

    Wednesday, November 13, 2013 6:29 AM
    Moderator
  • Thanks for your reply.

    Edy


    Edy from Switzerland

    Wednesday, November 13, 2013 8:50 AM
  • Hi Edy,

    Was your issue resolved?

    If yes, we will archive this thread temporarily.

    If no, please reply and tell us the current situation.

    If you have any other question, feel free to contact us. We will try our best to help you.

    If you have any feedback on our support, please click here


    Karen Hu
    TechNet Community Support

    Friday, November 15, 2013 2:58 AM
    Moderator
  • It was resolved. Thank you!

    Edy from Switzerland

    Saturday, November 16, 2013 1:21 PM