none
Bitlocker suspending several times during the latest cumulative patches RRS feed

  • Question

  • Hello all,

    While going through the Bitlocker event viewer on a specific system, I noticed the following events that indicate that Bitlocker gets suspended multiple times within a small window of time:

    7/11/2018 8:07:43 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:43 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:43 AM           793 Warning          BitLocker resealed boot settings to the TPM for volume C:.
    7/11/2018 8:07:43 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:42 AM           793 Warning          BitLocker resealed boot settings to the TPM for volume C:.
    7/11/2018 8:07:42 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:42 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:42 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:42 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:42 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:42 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:41 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:41 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:41 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:41 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:41 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:41 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:40 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:40 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:40 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:40 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:40 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:40 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:40 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:40 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:40 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:39 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:39 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:39 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:39 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:39 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:39 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:38 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:38 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:38 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:38 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:38 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:38 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:38 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:38 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:37 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:37 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:37 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:37 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:37 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:37 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:37 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:36 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:36 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:36 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:36 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:36 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:36 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:35 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:35 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:35 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:35 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:35 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:35 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:35 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:35 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:35 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:34 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:34 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:34 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:34 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:34 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:34 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:33 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:33 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:33 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:33 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:33 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:33 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:33 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:33 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:33 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:32 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:32 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:32 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:32 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:32 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:32 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:31 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:31 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:31 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:31 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:31 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:31 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:31 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:31 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:31 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:30 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:30 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:30 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:30 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:30 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:30 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:30 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:30 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:30 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:29 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:29 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:29 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:29 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:29 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:29 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:29 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:28 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:28 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:28 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:28 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:28 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:28 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:28 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:28 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:27 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:27 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:27 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:27 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:27 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:27 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:27 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:27 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:27 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:26 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:26 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:26 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:26 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:07:26 AM           840 Information      A trusted WIM file has been added for volume C:....
    7/11/2018 8:07:26 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:07:25 AM           773 Warning          BitLocker was suspended for volume C:.
    7/11/2018 8:06:57 AM           793 Warning          BitLocker resealed boot settings to the TPM for volume C:.
    7/11/2018 8:06:57 AM           817 Information      BitLocker successfully sealed a key to the TPM....
    7/11/2018 8:06:57 AM           793 Warning          BitLocker resealed boot settings to the TPM for volume C:.
    7/11/2018 8:06:57 AM           817 Information      BitLocker successfully sealed a key to the TPM....

    Investigating this behavior, I noticed that it happens on all of our Win 10 systems at the same time that the system is rebooted to apply the cumulative patches, here is the setup event log from the same system, you can see that the date and time that Bitlocker was suspended several times is the same that the cumulative patches got applied:

    7/11/2018 8:07:44 AM             2 Information      Package KB4284874 was successfully changed to the Installed state.
    7/11/2018 8:04:19 AM             4 Information      A reboot is necessary before package KB4284874 can be changed to the Installed state.

    It does not actually cause any issues, but this is the first time we are encountering such behavior, I was wondering if anybody else sees it and what might trigger it \ if it is expected.

    Thank you!

    Tuesday, July 17, 2018 10:35 AM

All replies