This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(38.4, 26%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJB%3C/text%3E%3C/svg%3E)
This is my second time posting this. My last post was deleted for some reason.
I am trying to image a new PC with MECM with an existing Windows 11 image. I recently updated MECM to version 2303 and installed the latest version of Windows ADK and preinstallation environment add-on. I did update my distribution points and reloaded the boot image with the new ADK.
I verified that this same task sequence works on one of our other PC's and does install Windows 11 to that PC.
I did load the network and storage drivers into the boot image for the new PC.
This new PC fails the task sequence at the Pre-Provisioning Bitlocker step. I will attach the smsts.log file.
This part seemed interesting because it's failing at the Pre-Provisioning Bitlocker step. It seems to detect the TPM chip, can take ownership, can find the drive, can encrypt the drive, but craps out at a configuration change with manage-bde.exe.
<![LOG[Tpm is enabled]LOG]!><time="14:28:27.639+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="0" thread="8" file="tpm.cpp:226">
<![LOG[Tpm is activated]LOG]!><time="14:28:27.639+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="0" thread="8" file="tpm.cpp:231">
<![LOG[Tpm is owned]LOG]!><time="14:28:27.671+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="0" thread="8" file="tpm.cpp:236">
<![LOG[Tpm ownership is allowed]LOG]!><time="14:28:27.671+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="0" thread="8" file="tpm.cpp:241">
<![LOG[Tpm has compatible SRK]LOG]!><time="14:28:27.671+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="0" thread="8" file="tpm.cpp:245">
<![LOG[Tpm has EK pair]LOG]!><time="14:28:27.671+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="0" thread="8" file="tpm.cpp:249">
<![LOG[Initial TPM state: 63]LOG]!><time="14:28:27.671+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="0" thread="8" file="offlinebitlocker.cpp:162">
<![LOG[Searching for next available system volume:]LOG]!><time="14:28:27.671+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="1" thread="8" file="main.cpp:234">
<![LOG[ Volume C: is a valid target.]LOG]!><time="14:28:27.686+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="1" thread="8" file="main.cpp:215">
<![LOG[Found available volume C:]LOG]!><time="14:28:27.686+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="1" thread="8" file="main.cpp:265">
<![LOG[Target drive C: is not same as OS drive.]LOG]!><time="14:28:27.686+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="1" thread="8" file="main.cpp:126">
<![LOG[Start enabling BitLocker offline ...]LOG]!><time="14:28:27.686+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="1" thread="8" file="offlinebitlocker.cpp:58">
<![LOG[Encrypting used disk space]LOG]!><time="14:28:27.686+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="1" thread="8" file="offlinebitlocker.cpp:74">
<![LOG[Using default disk encryption method setting provided by OS]LOG]!><time="14:28:27.686+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="1" thread="8" file="offlinebitlocker.cpp:128">
<![LOG[Command line for extension .exe is "%1" %*]LOG]!><time="14:28:27.686+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="0" thread="8" file="CommandLine.cpp:229">
<![LOG[Set command line: "X:\Windows\system32\manage-bde.exe" -on C: -used]LOG]!><time="14:28:27.686+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="0" thread="8" file="CommandLine.cpp:747">
<![LOG[Executing command line: "X:\Windows\system32\manage-bde.exe" -on C: -used with options (0, 0)]LOG]!><time="14:28:27.686+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="0" thread="8" file="CommandLine.cpp:847">
<![LOG[Process completed with exit code 2147942487]LOG]!><time="14:28:27.769+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="0" thread="8" file="CommandLine.cpp:1161">
<![LOG[ulExitCode == 0, HRESULT=80004005 (K:\dbs\sh\cmgm\0405_083130\cmd\w\src\client\OsDeployment\OfflineBitlocker\offlinebitlocker.cpp,133)]LOG]!><time="14:28:27.769+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="0" thread="8" file="offlinebitlocker.cpp:133">
<![LOG[Failed to run command line 'X:\Windows\system32\manage-bde.exe -on C: -used' with exit code 2147942487]LOG]!><time="14:28:27.769+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="3" thread="8" file="offlinebitlocker.cpp:133">
<![LOG[COfflineBitLocker::Enable(argInfo.sDrive, argInfo.bFullDisk, argInfo.dwEncryptMethod), HRESULT=80004005 (K:\dbs\sh\cmgm\0405_083130\cmd\w\src\client\OsDeployment\OfflineBitlocker\main.cpp,493)]LOG]!><time="14:28:27.769+300" date="12-21-2023" component="OSDOfflineBitLocker" context="" type="0" thread="8" file="main.cpp:493">
<![LOG[Process completed with exit code 2147500037]LOG]!><time="14:28:27.784+300" date="12-21-2023" component="TSManager" context="" type="0" thread="1544" file="CommandLine.cpp:1161">
This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(3.2, 52%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJB%3C/text%3E%3C/svg%3E)
Hello this is my personal account. The work account I was using (which created this thread) was suspended for violating the Microsoft Q&A code of conduct.
I was trying to post logs and every time I tried to post some logs, it prevented me from doing so. However I believe the log entries I was trying to post are relevant to the problem I am experiencing.
Also I skimmed through the MIcrosoft Q&A code of conduct and there is no mention of logs in the code of conduct. So I don't understand why I was prevented from posting logs, and then suspended for doing so.
I would ask that I please have my work account unsuspended so that I can continue seeking assistance for the problem I am experiencing. Any help would be appreciated.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(22.400000000000002, 54%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN2%3C/text%3E%3C/svg%3E)
Hi Joshua Bauer
Error 2147942487 from manage-bde translates to “The key protector has an invalid format.” or “The EncryptionMethod parameter is provided but is not within the known range.”
-This could indicate that TPM settings in BIOS is invalid. have you tried to reset the TPM chip?
-Make sure that the %OSDisk% variable is assigned to the Windows partition in the format step.
Thank you for the feedback. I did clear the TPM chip in the BIOS before attempting to image the PC and I checked and did not initially have the OSDisk variable assigned to the drive partition. I added it to the task sequence but it didn't seem to change anything, and the task sequence still fails at the pre-provisioning bitlocker step.
I'll attach a screenshot so you can see where I assigned the variable. I think I did it correctly?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(166.4, 7.000000000000001%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
Hi Have you found a solution for that?