BSOD during a BitLocker decryption...now can't unlock the volume...
I was in the process of decrypting a BitLocker encrypted drive (was about to move the data to a larger volume and needed to free up the drives) when I got a BSOD. I have since tracked down the problem and am no longer getting random reboots. However, when I attempt to unlock the volume, I get the following message after I enter the password: BitLocker Drive Encryption failed to recover from an abruptly terminated conversion. This could be due to either all conversion logs being corrupted or the media being write-protected. The volume is a RAID 1+0 array on an Intel ICH10 controller. The Intel Rapid Storage app is reporting that the array is currently verifying (15% complete and climbing). As best I can tell, the array is fine. All drives report S.M.A.R.T. results as OK. I have attempted to use the Recovery Key, but that also fails. The recovery key identification matches, but the GUI tool (I forgot my password) reports that it is the wrong recovery key. The command line tool simply reports that the password failed to unlock volume. The motherboard is a Gigabyte EP45-UD3P and includes a TPM module. The TPM Management reports that it is an IPX v1.2. Obviously I'm trying to unlock the drive and get the data back. I'm hoping that the array verification will resolve the problem once completed, but I have my doubts. I'm hopeful that I can recover the key from the TPM, but I have no idea if that is possible or if the TPM has even been used (This is a data volume, not the system/OS volume). Any assistance would be greatly appreciated. P.S. I attempted to use the BitLocker Repair Tool from KB928201, but it tells me that The update is not applicable to your computer. I'm not sure if that means the update has already been applied (i.e. from a Service Pack or other update) or that it doesn't work for my system. (Windows 7 Ultimate)
June 15th, 2011 4:45pm

Hi M G Holley, Thanks for the post! Please refer to this: Using the BitLocker Repair Tool to Recover a Drive. It's applied for Windows 7. Regards, MiyaThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
June 17th, 2011 1:32am

I ran the BitLocker Repair tool with the follow results: C:\Windows\system32>repair-bde X: Y: -rp *****(insert private 256-bit key here)**** BitLocker Drive Encryption: Repair Tool version 6.1.7601 Copyright (C) Microsoft Corporation. Beginning scan for BitLocker metadata. Scanning boot sectors for pointer to metadata: 100% Finished scanning for BitLocker metadata. LOG INFO: 0x00000027 Valid metadata at offset 400556032 found at scan level 1. LOG INFO: 0x00000028 Successfully created repair context. Beginning decryption. Decrypting: 100% Complete. Finished decryption. ACTION REQUIRED: Run 'chkdsk Y: /f' before viewing decrypted data. After completing the chkdsk run, approximately 10% of my files are missing. I ran the repair sequence twice with the same results. I’m guessing this means that about 10% of the drive had been decrypted when the BSOD hit. Most of the missing data is recoverable, and the chkdsk results point to the filenames for many of the missing files as well as the file structure for the missing section. But 300GB seems like a lot of files to lose over a minor corruption error. (i.e. it seems unlikely that 300GB of files was being decrypted in RAM when the BSOD hit). Are there any more advanced tools or 3rd party tools that might help with recovery?
June 22nd, 2011 4:23pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics