Bitlocker problem
Hi All, Today I tried to boot the my PC using the the BIOS+HD password, I found out a dark screen with the following: Windows Bitlocker Driver Encryption Information The system boot information has changed since Bitlocker was enabled. You must supply a Bitlocker recoveru key to start this system. Confirm that the changes to the system bot information are authorized. If the changes to the system boot information are trusted, then suspend and resume Bitlocker. This will reset Bitlocker to use the new boot information, otherwise restore the system boot information. I normally log on using biometric (fingerprint sensors) and this works just fine with the bitlocker enabled. Best regards, Ibrahim
January 20th, 2011 11:05am

Did you per haps have a bootable DVD inserted or updated the BIOS? In some cases this happens when you use a docking station when the system boots. Some change in the boot environment triggered this behaviour. If the system keeps requesting the recovery password, you'll have to follow the instruction and suspend and resume BitLocker. This can be done from the command line with Manage-bde.exe.Ray - Author of Windows 7 for XP Professionals
Free Windows Admin Tool Kit Click here and download it now
January 20th, 2011 6:08pm

Did you per haps have a bootable DVD inserted or updated the BIOS? In some cases this happens when you use a docking station when the system boots. Some change in the boot environment triggered this behaviour. If the system keeps requesting the recovery password, you'll have to follow the instruction and suspend and resume BitLocker. This can be done from the command line with Manage-bde.exe.Ray - Author of Windows 7 for XP Professionals
January 21st, 2011 2:06am

I tried to do that, but it didn't work, still the system can't boot using the HD password.
Free Windows Admin Tool Kit Click here and download it now
January 23rd, 2011 8:51am

You have to repopulate the startup information in the TPM. You can use the following command line from an elevated prompt to do that: C:\Windows\System32\manage-bde.exe -protectors -add C: -tpm If that does not work, you may have to clear and activate the TPM first. This can be done from the BIOS at startup.Ray - Author of Windows 7 for XP Professionals
January 24th, 2011 9:11am

Hi ray, Well resetting the TPM can jeopardize all the system as I can lose access to the HD completely! Also what does this manage-bde.exe Do exactly? I just don't want to mess up my live environment.
Free Windows Admin Tool Kit Click here and download it now
January 24th, 2011 10:19am

Hi Ibrahim, I assumed you only had the OS volume encrypted with BitLocker. Is this the OS volume that you have to type the recovery password for at startup? I am not sure now if you have a data partition or external drive encrypted. If you have encrypted the OS partition and your system is requesting the recovery password at startup, then your TPM currently does not contain the correct information to provide the BitLocker key material. In that case you can safely clear the TPM and repopulate with Manage-bde as described. The command writes the correct information in the TPM so that the system can start without requiring the recovery password.Ray - Author of Windows 7 for XP Professionals
January 24th, 2011 2:36pm

You have to repopulate the startup information in the TPM. You can use the following command line from an elevated prompt to do that: C:\Windows\System32\manage-bde.exe -protectors -add C: -tpm If that does not work, you may have to clear and activate the TPM first. This can be done from the BIOS at startup.Ray - Author of Windows 7 for XP Professionals
Free Windows Admin Tool Kit Click here and download it now
January 24th, 2011 5:09pm

Hi, Would you please let me know if the computer is in a domain environment? Based on the current situation, I suggest disabling Bitlocker, decrypting the drive. You can open an CMD window with Administrator Privileges and type: gpupdate /force. After that, enable Bitlocker with the new setting applied. Regards, NikiPlease remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
January 24th, 2011 10:29pm

Hi Ibrahim, I assumed you only had the OS volume encrypted with BitLocker. Is this the OS volume that you have to type the recovery password for at startup? I am not sure now if you have a data partition or external drive encrypted. If you have encrypted the OS partition and your system is requesting the recovery password at startup, then your TPM currently does not contain the correct information to provide the BitLocker key material. In that case you can safely clear the TPM and repopulate with Manage-bde as described. The command writes the correct information in the TPM so that the system can start without requiring the recovery password.Ray - Author of Windows 7 for XP Professionals
Free Windows Admin Tool Kit Click here and download it now
January 24th, 2011 10:34pm

Hi Again, After waiting all such time, I think SP1 has solved it out, as after I got the message of the recovery key, simply I pressed CTRL+ALT+DEL to restart the system, and it restart normaly after that
March 9th, 2011 5:07am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics