BitLocker Drive Encryption, Access Issues

I encrypted my external hard drive and save the recovery key to a thumb drive. Now I cant access my external drive. I get an error message that says that the key I have entered does not match this drive. Can anyone help?

Hi harvey,
You should use password first.
If you forgot your password for decryption, you could use your recovery key for recovery. If you mean the error message says that the recovery key you entered does not match this drive. Make sure you enter the right key and txt file has not
been modified before because error shows that you entered the wrong key.
If the recovery key doesn’t work, I’m afraid that there is no other way to access it
Regards
D. Wu

Similar Messages

Critical BitLocker Drive Encryption system files are not available

Hi all,
We are running into some issues when attempting to configure BitLocker Drive Encryption through the BitLocker UI on Windows Server 2008SP2.
On running the BitLocker configuration screen we are presented with a message stating that
‘Your system volume is not configured correctly to allow you to use BitLocker Drive Encryption.
Critical BitLocker Drive Encryption system files are not available’
We believe this issue may have been caused during a recent hardware migration using the DoubleTake Move software as we encountered a similar issue with the Windows Backup utility not seeing any available HDDs.
Has anyone else encountered a similar issue and aware of any potential fix?

I think it should be supported on Windows Server 2008 as it is supported on Windows Vista.
Can you check whether BdeHdCfg.exe is present in System32 folder. If not can you copy the BdeHdCfg.exe installer from higher version of OS and copy it to the system32 folder on Windows Server 2008 and then run the command with the administrative rights.
NOTE : Make sure to change the directory to %SystemDrive%\Windows\System32
Before running the command.
Regards, "Gaurav Ranjan" =========== NOTE: Mark as Answer and Vote as Helpful if it helps =======

BitLocker Drive Encryption Recovery Key

I have a Dell Optiplex 7010 running Windows 7 Enterprise 64-bit. Intermittently when booting the computer the Windows BitLocker Drive Encryption Recovery Key Entry screen shows up. Most of the time I can power off the computer and then turn it back on and
it loads Windows without that screen showing up. If powering it off and back on again doesn’t get me past the Windows BitLocker Drive Encryption Recovery Key screen, I will enter the recovery key.
I have already reimaged the computer, replaced the hard drive, cleared Bitlocker Cache in the BIOS and have updated the BIOS to the latest version.
Any ideas to keep the Windows BitLocker Drive Encryption Recovery Key Entry screen from showing up?

Hi,
I have already reimaged the computer, replaced the hard drive, cleared Bitlocker Cache in the BIOS and have updated the BIOS to the latest version.
Did you mean you have re-install the OS? Did you use another clean image rather than capturing the old OS?
Did you encrypt the OS partition?
Please use below command to check the status:
manage-bde -status
If there is any volume is encrypted, use below command to turn it off:
manage-bde -off C:
Karen Hu
TechNet Community Support

Diffuser missing from BitLocker Drive Encryption

I couldn't help but notice on my Windows Server 2012 Essentials installation that the Diffuser options are gone from BitLocker Drive Encryption. This was a shocker. Since Windows Vista/Server 2008, the following four options have always been available:
AES 256-bit with Diffuser
AES 128-bit with Diffuser
AES 256-bit
AES 128-bit
The default was AES 128-bit with Diffuser, but I always opted for the strongest, and changed it to AES 256-bit with Diffuser. I made this change after probing around Google and Bing to see if BitLocker with Diffuser provided stronger encryption than BitLocker
sans Diffuser. What I found supported the use of Diffuser as being the strongest, thereby making AES 256-bit with Diffuser the strongest encryption of the four settings.
So to find Diffuser culled from BitLocker was a shocker, and made me lose a bit of respect for the technology. Why would you WEAKEN the product (BitLocker) by removing the stronger versions of the encryption? This TechNet article is quite disappointing: http://technet.microsoft.com/en-us/library/hh831713.aspx
The article simply says, "The Diffuser option is no longer available to be added to the Advanced Encryption Standard (AES) encryption algorithm" under the heading "Removed
or deprecated functionality." There is ZERO explanation.
I'm hoping someone can answer this, please. WHY would you take out the stronger versions of encryption in favor of leaving the weaker ones? Wouldn't it be more appropriate
to deprecate the non-Diffuser variants and require the use of Diffuser?
BitLocker was, and still is, a great technology, but it was just made quite a bit weaker with the release of Windows 8 and Server 2012.

Hi Manoj,
If I understand your answer, are you saying that the BitLocker options with Diffuser are actually WEAKER than those without it?
It's always been my impression that FIPS aims for the highest possible security standards. If FIPS-only environments allow BitLocker without Diffuser but disallow BitLocker when Diffuser is used, that would lead me to believe Diffuser actually weakens
BitLocker. Is this correct?
I guess that as long as BitLocker with AES 256-bit encryption makes the FIPS federal government folks happy, then it's good enough encryption for me!
Also, you mention crypto-acceleration hardware. Where would I find this? I'm guessing this is something found in newer servers, laptops and desktops? Or maybe even tablets? Would the new Microsoft Surface come with such capabilities?
Matt

Critical BitLocker Drive Encryption system files are not available- which was working earlier.

Hello All,
The E drive (external USB drive) of server which was encrypted using bitlocker. earlier it was working perfectly fine. On running the BitLocker configuration screen we are getting with a message stating that ‘Your system
volume is not configured correctly to allow you to use BitLocker Drive Encryption. Critical BitLocker Drive Encryption system files are not available’
now whenever we are clicking on E drive it is showing to format the disk.
can anyone help me to understand which are the files required or repair for bitlocker?
Thanks & Regards,
MAsud Hussain

Hi Masud,
Do you have any progress at the moment?
If there are any related error messages in Event Logs, please post them out for further analyzing.
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Hard Drive Encryption Issue

This is in regard to hard drive encryption issues in my USB Hard drive. I have Windows 7. I was encrypting my USB hard drive and
was able to enter a password. However, I did not receive any prompt to save the Bitlocker recovery key. During encryption process, I received an error. The encryption process was unsuccessful. However, now when I plug-in the hard drive, I receive the
following message on the status bar:
Application and Device Control rule Block writing to removable media. Unencrypted drive found (No_Encrypted_Found) has blocked edpa.exe trying to access Volume
{e3901a75-f1ff-11e1-817c-806e6f6e6963 alpha-numeric number appearing here}
When I try to open the drive, it asks for a password. When I enter the password, I am receiving the following error message:
Bitlocker Drive Encryption failed to recover from an abruptly terminated conversion. This could be due to either all conversion logs being corrupted or the media
being write-protected.
I have read that Bitlocker repair tool can help resolve this issue.
However, I just have the password that I had set to encrypt the drive and Bitlocker recovery key identification. Can this help to get access to my hard drive data using the Bitlocker tool.

Checked this ?
http://answers.microsoft.com/en-us/windows/forum/windows_7-security/bitlocker-drive-encryption-failed-to-recover-from/232e812b-4f7a-e011-9b4b-68b599b31bf5
Arnav Sharma | http://arnavsharma.net/ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
the thread.

Bit locker drive encryption failed due to power failer and hard disk corrupted

I ran Bitlocker drive ecryption drive D. My pc is windows 7 ultimate, while it was in progress of 1% due to power failer the encryption failed, when power resume the drive didn't showed the file format nor the size but it shows the size in disk management.
It showed like this in My computer
I do Have the recovery code password and back of recovery password so I ran the "manage-bde-_unlock D:-rp[my code ]
and my pc got hang no other option rather than to press the restart button.
then I used commang "repair-bde -force D:I:-rp[my rp] and following info showed but it stucked in 1% about 8 hours, and there was no increase in the pecentage
I also connected the hardisk to mac but all othe partation showed but didn't showed the encrypted one.
I had lots of memorable picture and other backups so any one kindly help me to get out of this problem. Thanks for help

Hi,
The BitLocker encryption and decryption processes can be interrupted by turning the computer off, and it will resume where it left off the next time Windows starts. This is true even if the power is suddenly unavailable.
Bitlocker-repair (repair-bde) tool
can't repair a drive that failed during the encryption or decryption process.
In addition, could you please explain a bit for what drive you are trying to deal with? external one?
When you first restart your PC, have you seen any signs that indicate that the encryption is in process?
Regarding your scenario, please take a look to see if the following articles could help here:
Scenario 11: Recovering Data Protected by BitLocker Drive Encryption (Windows 7)
Besides, when running manage-bde command, did we followed the steps mentioned in the below article?
Scenario 14: Using a Data Recovery Agent to Recover BitLocker-Protected Drives (Windows 7)
Best regards
Michael Shao
TechNet Community Support

Drive encrypted using Bitlocker...encrypting backup on Server 2008

I've seen this topic discussed a few times but with very little real explanation on how to do this.
I have several servers for several customers that now must be encrypted. I've run a few tests with our own internal servers and one user server and the drive encryption goes off without a hitch.
Encrypting their backups however is still an issue. Usually they are setup with 2 drives, one on site, one off. Obviously the one on site is a theft issue so it defeats the purpose of encrypting the server if there is an un-encrypted backup.
Bit Locker to Go is an R2 feature, isn't it? Plus when you setup a drive for Windows backup, it formats the drive so is Bitlocker even usable?
The whole idea of encrypting their drives concerns me because of recovering the data/server after a crash. We use encrypted online back up but the need to do a bare metal restore is the part that concerns me. I even thought of adding a third drive to the mix just to be overly redundant(paranoid).
What is the best way to handle this? How does it work in the event of a server crash, how do you do a bare metal restore with a bit locker drive?
Thanks

You can bitlock a portable drive for Server 2012 R2 backup as follows:
Using Essentials, the first time you use the drive
1. Start the dashboard and go to the Storage Tab and select
Disks
2. Click on the new drive and add it to the backup. Give it a unique label. Backup will format it and remove the drive letter.
3. Go to the start screen and start Administrative tools | Computer management
4. Find Disk Management and scroll down to find your backup disk.
5. Right click on the disk block and choose Change Drive Letter and Paths.
Add a drive letter.
6. Open This PC and right click on your drive. Choose
Turn on Bitlocker.
7. Give the disk a password and save or print the key. Choose to encrypt used space only.
8. When Bitlock finishs encrypting the drive, click on the Manage Bitlocker link at the bottom of the progress screen. Find your disk and click the dropdown arrow. Click on
Turn on Auto-unlock. (Auto-unlock greatly simplifies swapping disks. However, my experience has been it will not reliably unlock the disk after a restart or power failure. You may have to log in for the disk to be reconnected.)
9. You can use Disk Manager as you did before to
Remove the drive letter. It can be handy for verifying the disk's status or distinguishing multiple disks, but you don't really need it.
10. Close everything up. You are good to go. After this, the disk can be replaced using the normal procedures for swapping USB drives.

Bitlocker drive issue

im trying to open my bitlocker drive the password is correct but after entering the password it is giving me a messege that
"bit locker drive encryption failed to recover from an abruptly terminated conversion. This could be due to either all conversion logs being corrupted or the media being write-protected"
plz help me all my work iv saved in this drive

Hi
repair-bde C: Z: -rp 062612-026103-175593-225830-027357-086526-362263-513414
Use repair-bde alone first
it should give you some information about bitlocker.
the full command explaination :
C: is the drive that your data is on that you want to recover
z: is the drive you want to copy the recovered data to
after -rp switch you have to type in your recovery password.
you can use -rk and specify recoverykey file location after.
ex: repair-bde C: Z: -rk F:\RecoveryKey.bek
Have fun Recovering :P
Farhad

I can not access my hard disk protected by Bitlocker drive despite the right recovery key

I had locked my 1 TB harddisk 1 year back with BitLocker Drive. I have been using its recovery key to unlock it since then. But since 3 days back, it has been displaying the message " Error recovering disk. The recovery key entered is not correct, try
it again." And I am not able access my important documents despite of having the right key.
Please help me. Thanks alot in advance.

One of the greatest feature of MBAM is single-sign of Recovery Key which means if a recovery key is used once, it will be automatically re-generated. So, first match the 8 digit starting of Recovery ID with its associated recovery key.
Or re-request for the Recovery Key to your MBAM Administrator by providing him the starting 8 digit recovery ID. You can also get the recovery key again using the MBAM self-Service Portal.
Gaurav Ranjan

Drive encryption software

We have a Windows server 2008 r2 domain and running 500 windows 7 machines. We are looking into a new drive encryption software. We currently use Novell ZenWorks Full Disk Encryption. We have had several issues with this IE blue screens when installing
the agent.
I would like to know of some other reputable options for disk encryption. It need to be centrally managed and 256 bit encryption.
Thanks
Josefah

I am sure that is not a surprising answer, have you thought about Bitlocker http://windows.microsoft.com/en-US/windows7/products/features/bitlocker
- you need Win 7 Ultimate or Enterprise
- works great with TPM (without TPM look in Win 8)
- manage it with in AD (with an Enterprise Agreement you can do MBAM)
- add some scripts (WMI) for reporting
- configure GPOs so that all recovery keys are stored centrally and make seperate backups of all recovery info in AD just in case the machine account gets deleted and recreated and you need after 2years the recovery key
My experience with 3rd parties are not good either, regardless who it was.
Hope that helps,
Lutz

HP Drive Encryption Error: Unable to unlock media.

Hi I looked around to see if anyone else is stuck with the same issue I am in but I haven't been so lucky. I was finally able to login into my HP Client Security since awhile and while looking around I clicked to have my hard drive encrypted not putting a lot of thought into it. My laptop rebooted due to Norton while I was at work. When I came back and tried to login via the HP Drive Encryption like I would usually do it would not let me instead a message appeared that it was "unable to unlock media. To try again when it would re-start" I thought okay I would try again. However no matter how many times I try to login the same message would come out. I really don't know what to do and I am afraid I will have to do an HP recovery if I don't find a solution.

Bumping this post. I have the same exact problem. I checked box to encrypt hard drive. Now upon booting back up, I get that I am "unable to access media". I can't use my established password and my 3 question sparekey doesn't work either. I really don't want to start from scratch again for something that wasn't my fault. Don't put the software on if it isn't going to work properly.

TrueCrypt 6.2 system drive encryption hangs system sometimes a day

Hi,
I use truecrypt for years with xp and vista - last with Vista and T500, a few weeks ago I installed windows 7 x64 rtm. Every thing works fine and so I checked step by step my usual installed apps and tools.
I see win7 is not supported by truecrypt but seems to work fine. But sometimes (one or two a hour) my system hangs for about 10 to 40 seconds. So I decided to go step by step backwards and removed installed tools.
Removing TC solved my problem. Has anybody seen the same (TC6.2 on Win7 ult. x64 using Lenovo T500 with Intel SSD)?
best regards
Ronny

I have exactly the same problem, but with a HP Elitebook 2530p
TrueCrypt 7.0a
Windows 7 x64
SSD drive, but had the same problem on my traditional HDD.
The interval is somewhat longer for me, maybe a few times a day.
And, just as you discovered, removing truecrypt system encryption resolves the issue. Wonder if it's an issue with just the system drive encryption thingy, or it affects all systems having encrypted volumes opened?

BitLocker Drive Label

We use BitLocker on our laptops which are not connected to AD. We would like to change the Computer Name of the laptops and would like the BitLocker Drive Label to match the new Computer Name. Is there a way to change the Drive Label without decrypting and
re-encrypting the drive? I don't see any options to change the Drive Label with the Manage-bde command line tool. Thanks.
Charles

Hi Ronald,
Thanks for reply. I read your solution in the blog and I think you might misunderstand what Charles means.
I think Charles did mean he changed his computer name and wants his drive label in Bitlocker password entry match his new computer name, not just change the Bitlocker driver label.
As following:
But still thank you for your input.
Regards

Bitlocker enabled drive, recovery key needed during boot, PCS did not match, event id 24635, source bitlocker-driver

Hi
After rebooting one of our test machines, bitlocker wanted the recovery key.
There were no hardware modifications on that machine.
Error message in event log:
Bootmgr failed to obtain the bitlocker volume master key from the TPM because the PCRs did not match
Event id 24635, source bitlocker-driver
Each time the machine starts, the recovery key is needed.
Any idea how to solve that issue and why it happens?
update:
Second partition was created manually on that machine. So that's clear that bitlocker reacts...
But now: how can I confirm those changes so that the recovery key is not needed each time we boot?

Hi,
I would like to confirm if BitLocker accepts the recovery key?
Please update the BIOS to improve the stability for TPM first.
I also would like to suggest you disable and enable BitLocker again to reset the settings.
For more information, please refer to the following link:
http://technet.microsoft.com/en-us/library/dd835565(WS.10).aspx
Regards,
Arthur Li
TechNet Subscriber Support
in forum
If you have any feedback on our support, please contact
[email protected]
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

BitLocker Drive Encryption, Access Issues

Similar Messages

Maybe you are looking for