Bitlocker and Vista Enterprise SP2
Hello,I installed SP2, and when I try to setup bitlocker, it gives an error: "Could not enable encryption on OS drive."Also, in the application log it says "Error, OS drive not fully decrypted; cannot enable encryption."Does anyone know about the compatibility of bitlocker with SP2? Maybe it'll work once SP2 has a RC?
March 11th, 2009 9:36pm

Hi,Did you have bitlocker enabled before applying the service pack?Have you ran the Bitlocker Drive Preparation Tool? Victor Constantinescu - MVP Security, MCTS
Free Windows Admin Tool Kit Click here and download it now
March 11th, 2009 9:52pm

Bitlocker was not enabled before applying the service pack. The machine was imaged with Vista SP1, then upgraded to SP2, and then bitlocker was applied.Bitlocker Drive Prep is run after SP2, and from what I can tell that is successful because the partition created by itis present. It's the encryption that fails.
March 11th, 2009 10:15pm

Looks like there may be further issues with Vista 64 bit SP2 and Bitlocker.. I havent yet tested 32 bit SP2 but I have just created a new image for our corporate deployment onto Dell 745 and 755 systems. The Bitlocker Drive Preparation tool worked well with no issues with SP1 on Vista Enterprise. With SP2 im getting the message The update does not apply to your system.. I have confirmed the Bitlocker Version and the OS version. No details on the web yet and i have re-downloaded the drive prep utility and ran it as an administrator on the local machine. Pete
Free Windows Admin Tool Kit Click here and download it now
May 5th, 2009 7:02am

Hello, is it possible to prep the drive with the drive preparation tool while using Windows Vista SP 2? I always get the message "This update is not for your System." (In german: "Dieses Update gilt nicht fr Ihr System.") while installing the drive prep update. Thx for your support.
May 18th, 2009 4:01pm

I have been getting the "Update does not apply to your system" message as well with Vista Enterprise with SP2 (32-bit). Hopefully they will revise the prep tool when SP2 is released publicly, but I doubt it.
Free Windows Admin Tool Kit Click here and download it now
May 22nd, 2009 10:18pm

I have the same problem. We are using the Drive Preparation Tool in our Task Sequencer with SCCM. With Vista SP2 the Installation fails at this point. We need a updated Version of the prep tool I think.This Vista Service Pack ist really not for IT Pros! We have several problems... MS isn't ready yet, I think.Patrick Gerber
May 26th, 2009 3:39pm

The problem is with the installer. Here is a work around I found that does work. expand -f:* "C:\Windows6.0-KB933246-x86.msu" %TEMP%pkgmgr.exe /n:%TEMP%\Windows6.0-KB933246-x86.xmlC:\Program Files\BitLocker\BdeHdCfg.exeIt may take 2 min for that file path to show up.
Free Windows Admin Tool Kit Click here and download it now
May 29th, 2009 10:03pm

Thanks very much. I will try this workaround!Patrick Gerber
May 29th, 2009 10:32pm

Just tried this solution on a Server 2008 SP2 and it seems to work OK as well.I tried to do the drive preparation manually but didn't really find any good guidance on how to move BCD data to a new partition so I'm glad the drive preparation tool works with this workaround.Thx,Kris.
Free Windows Admin Tool Kit Click here and download it now
June 1st, 2009 12:13am

Have you ever had Bitlocker running on this system? I have found that some systems simply do not have the right hardware to support Bitlocker. I would double-check that it works in SP1. I had issues with Bitlocker in SP1 and spent 4 and 1/2 days trouble-shooting bitlocker only to find out my hardware didn't support it.Owner, Quilnet Solutions
June 1st, 2009 8:35am

With SP1 it works fine on our systems. I will try this workaround this week on the same system witch Vista SP2.Patrick Gerber
Free Windows Admin Tool Kit Click here and download it now
June 1st, 2009 9:07pm

Other than a TPM module (which you can work around using a group policy, if you accept the less convincing method of storing encryptyion keys) what hardware requirements does bitlocker impose?Kris.
June 1st, 2009 11:42pm

It requires that some memory operations be executed during POST. Most modern computers will support the required operations but some older (like my 8 year old Dell PC) will not support them. I believe the operations are executed by the BIOS so if your computer doesn't support them try a BIOS update before giving up.It does require some configuration changes to the hard drive such as a boot loader partition. I have found that some CPU's may not support it (again, usually on older computers).For the intent of your question, modern computers will require nothing special. TPM is a plus (and really the secure way for bitlocker, USB drive option by itself really isn't much different then a Smartcard. You lose it with the computer and Bitlocker is useless.) But the USB drive option is better then nothing if you cannot get a TPM.Owner, Quilnet Solutions
Free Windows Admin Tool Kit Click here and download it now
June 2nd, 2009 6:59am

This work around worked great on my Vista SP2 laptop.
June 16th, 2009 6:54pm

it works finePatrick Gerber
Free Windows Admin Tool Kit Click here and download it now
July 11th, 2009 6:54pm

When I try to run the BdeHdCfg.exe, I get the following error:"The BitLocker Drive Preperation Tool cannot be usedin this version of Windows. Upgrade Windows."I am running this on a x64 machine. I am using the file Windows6.0-KB933246-x64, with a 3/3/2009 date on it. Any suggestions? In addition I am running this on Windows Vista Business x64, with SP2 installed. This is on a brand new Dell Optiplex 960.
July 20th, 2009 6:50pm

When I try to run the BdeHdCfg.exe, I get the following error:"The BitLocker Drive Preperation Tool cannot be usedin this version of Windows. Upgrade Windows."I am running this on a x64 machine. I am using the file Windows6.0-KB933246-x64, with a 3/3/2009 date on it. Any suggestions? In addition I am running this on Windows Vista Business x64, with SP2 installed. This is on a brand new Dell Optiplex 960. It works with Business edition? I was under the impression that it only worked with Enterprise and Ultimate editions. I would double-check that it's supported in Business edition.Owner, Quilnet Solutions
Free Windows Admin Tool Kit Click here and download it now
July 20th, 2009 7:01pm

Oh thanks, I see the error now. I accidentally installed the wrong version. Thanks, sometimes a second set of eyes does help.
July 20th, 2009 7:46pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics