Enabling Bitlocker encryption / SCCM 2012 SP1

[Elscorpio]

Hi

 

Does anyone know what the below error indicates from the smts.log file ? Please also see attached screenshot from my task sequence in SCCM

 

Executing command line: smsswd.exe /run: cmd.exe /c %windir%\system32\bdeHdCfg.exe -target default -size 300 -quiet TSManager 03-09-2014 16:17:23 6256 (0x1870)
[ smsswd.exe ] InstallSoftware 03-09-2014 16:17:23 2876 (0x0B3C)
PackageID = '' InstallSoftware 03-09-2014 16:17:23 2876 (0x0B3C)
BaseVar = '', ContinueOnError='' InstallSoftware 03-09-2014 16:17:23 2876 (0x0B3C)
ProgramName = 'cmd.exe /c C:\WINDOWS\system32\bdeHdCfg.exe -target default -size 300 -quiet' InstallSoftware 03-09-2014 16:17:23 2876 (0x0B3C)
SwdAction = '0001' InstallSoftware 03-09-2014 16:17:23 2876 (0x0B3C)
Getting linked token InstallSoftware 03-09-2014 16:17:23 2876 (0x0B3C)
failed to get the linked token information. It may not be available. Error 1312 InstallSoftware 03-09-2014 16:17:23 2876 (0x0B3C)
Working dir 'not set' InstallSoftware 03-09-2014 16:17:23 2876 (0x0B3C)
Executing command line: Run command line InstallSoftware 03-09-2014 16:17:23 2876 (0x0B3C)
Process completed with exit code 3231711239 InstallSoftware 03-09-2014 16:19:04 2876 (0x0B3C)
BitLocker Drive Preparation Tool version 6.1.7601 InstallSoftware 03-09-2014 16:19:04 2876 (0x0B3C)
InstallSoftware 03-09-2014 16:19:04 2876 (0x0B3C)
opyright © 2006-2008 Microsoft Corporation. InstallSoftware 03-09-2014 16:19:04 2876 (0x0B3C)
InstallSoftware 03-09-2014 16:19:04 2876 (0x0B3C)
InstallSoftware 03-09-2014 16:19:04 2876 (0x0B3C)
Command line returned 3231711239 InstallSoftware 03-09-2014 16:19:04 2876 (0x0B3C)
Process completed with exit code 3231711239 TSManager 03-09-2014 16:19:04 6256 (0x1870)
!--------------------------------------------------------------------------------------------! TSManager 03-09-2014 16:19:04 6256 (0x1870)
Failed to run the action: Create BitLocker partition.
Unknown error (Error: C0A00007; Source: Unknown) TSManager 03-09-2014 16:19:04 6256 (0x1870)
Set authenticator in transport TSManager 03-09-2014 16:19:04 6256 (0x1870)
Set a global environment variable _SMSTSLastActionRetCode=-1063256057 TSManager 03-09-2014 16:19:05 6256 (0x1870)
Set a global environment variable _SMSTSLastActionSucceeded=false TSManager 03-09-2014 16:19:05 6256 (0x1870)
Clear local default environment TSManager 03-09-2014 16:19:05 6256 (0x1870)
Failed to run the action: Create BitLocker partition. Execution has been aborted TSManager 03-09-2014 16:19:05 6256 (0x1870)
Set authenticator in transport TSManager 03-09-2014 16:19:05 6256 (0x1870)
Failed to run the last action: Create BitLocker partition. Execution of task sequence failed.
Unknown error (Error: C0A00007; Source: Unknown) TSManager 03-09-2014 16:19:05 6256 (0x1870)
Set authenticator in transport TSManager 03-09-2014 16:19:05 6256 (0x1870)

 

 

[anyweb]

do you get the same error if you specify

bdeHdCfg.exe -target default -size 300 -quiet

instead (without the path)

[Elscorpio]

Hi Niall

 

I have tried the modified version of Microsofts sample Bitlocker .vbs script that is available here:

 

http://www.niallbrady.com/2012/10/17/enabling-bitlocker-via-a-script-on-non-english-windows-7-installations-fails/

 

Unfortunately it fails with the same error, even though we have enabled the 6 AD Schema objects needed for TPM backup:

http://technet.microsoft.com/en-us/library/dd875533(v=ws.10).aspx

 

See attached files.

 

Do you know which of these TPM schema objects I can safely delete?

 

The very odd thing is that if I switch back to English Win7SP1 Enterprise with no language pack, the script works fine.

 

The issue described here does not work in our Enterprise environment, as the needed TPM schema objects is in our AD.

 

My issue is also described here:

https://social.technet.microsoft.com/Forums/en-US/de29627d-be74-4b96-9c32-faca46b022a9/enablebitlockervbs-error-the-protectkeywithtpm-failed-with-exit-code-80310018?forum=w7itprosecurity

 

Does not apply to our AD environment as you can see from the screenshots.

 

Any solution is appreciated.

bitlocker.log

[Elscorpio]

Hi

 

I made it work with the modified script available here:

 

http://www.niallbrady.com/2012/10/17/enabling-bitlocker-via-a-script-on-non-english-windows-7-installations-fails/

 

There is one place in this script, where you have to remove "true" to true, then it will work for example under a Win7 Ent SP1 English with german lang pack, then the encryption starts fine.