question

VivekTP-6764 avatar image
0 Votes"
VivekTP-6764 asked AllenLiu-MSFT answered

Bitlocker is not working for fixed using task sequence for specific models

Hi All, I have successfully deployed BitLocker via SCCM 2002 OSD task sequence Copy registry settings from the HKLM\Software\Polices\Microsoft\FVE registry hive in to the target computer - Activate C:\ via the built in SCCM task 'Enable BitLocker' with settings to use TPM and save to AD - Activate D:\ via the built in SCCM task 'Enable BitLocker' with settings to use TPM and save to AD question bitlocker is not enabled for dell specific models dell optiplex 9010 which have TPM 1.2 version, I get a below error in the smsts.log and sccm console log The task sequence execution engine failed executing the action (Enable BitLocker for D Drive) in the group (Setup Operating System) with the error code 2150695019 Action output: ... E FDV group policy registery key to escrow recovery password Using random recovery password Protection mode is not TPM, StartupKey, TPM+StartupKey or TPM+PIN. Use default group policy settings. Protecting key with external key Enabling auto unlockfor data volume Encrypting volume 'D:' Encrypting full disk uStatus == 0, HRESULT=8031006b (..\encryptablevolume.cpp,790) m_pEncryptableVolume->Encrypt(bFull), HRESULT=8031006b (..\bitlocker.cpp,1365) Encrypt( bWait, bFull ), HRESULT=8031006b (..\bitlocker.cpp,1571) uStatus == 0, HRESULT=8031001f (..\encryptablevolume.cpp,624) m_pEncryptableVolume->DeleteKeyProtectors(), HRESULT=8031001f (..\bitlocker.cpp,1406) pBitLocker->Enable( argInfo.keyMode, argInfo.passwordMode, argInfo.sStartupKeyVolume,argInfo.bWait, argInfo.bFull), HRESULT=8031006b (..\main.cpp,443) 'Encrypt' failed (2150695019) Failed to encrypt volume 'D:' (0x8031006B) Failed to encrypt volume (0x8031006B). 'DeleteKeyProtectors' failed (2150694943) Rollback failed (0x8031001F). The operating system reported error 2150695019: Group Policy settings require the creation of a password. For other models its working fine, issue is only happening for model dell optiplex 9010 Regards Vivek

windows-10-generalmem-cm-osd
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

AllenLiu-MSFT avatar image
0 Votes"
AllenLiu-MSFT answered

Hi, @VivekTP-6764
Thank you for posting in Microsoft Q&A forum.
Could you please have a more detailed and clearly description of your issue, it's better to use punctuation and divided into several paragraphs.

And have we compared the smsts.log of dell optiplex 9010 with the logs of other models that works fine.


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.