Bitlocker is not working for fixed using task sequence for specific models

Vivek TP 21 Reputation points

Hi All, I have successfully deployed BitLocker via SCCM 2002 OSD task sequence Copy registry settings from the HKLM\Software\Polices\Microsoft\FVE registry hive in to the target computer - Activate C:\ via the built in SCCM task 'Enable BitLocker' with settings to use TPM and save to AD - Activate D:\ via the built in SCCM task 'Enable BitLocker' with settings to use TPM and save to AD question bitlocker is not enabled for dell specific models dell optiplex 9010 which have TPM 1.2 version, I get a below error in the smsts.log and sccm console log The task sequence execution engine failed executing the action (Enable BitLocker for D Drive) in the group (Setup Operating System) with the error code 2150695019 Action output: ... E FDV group policy registery key to escrow recovery password Using random recovery password Protection mode is not TPM, StartupKey, TPM+StartupKey or TPM+PIN. Use default group policy settings. Protecting key with external key Enabling auto unlockfor data volume Encrypting volume 'D:' Encrypting full disk uStatus == 0, HRESULT=8031006b (..\encryptablevolume.cpp,790) m_pEncryptableVolume->Encrypt(bFull), HRESULT=8031006b (..\bitlocker.cpp,1365) Encrypt( bWait, bFull ), HRESULT=8031006b (..\bitlocker.cpp,1571) uStatus == 0, HRESULT=8031001f (..\encryptablevolume.cpp,624) m_pEncryptableVolume->DeleteKeyProtectors(), HRESULT=8031001f (..\bitlocker.cpp,1406) pBitLocker->Enable( argInfo.keyMode, argInfo.passwordMode, argInfo.sStartupKeyVolume,argInfo.bWait, argInfo.bFull), HRESULT=8031006b (..\main.cpp,443) 'Encrypt' failed (2150695019) Failed to encrypt volume 'D:' (0x8031006B) Failed to encrypt volume (0x8031006B). 'DeleteKeyProtectors' failed (2150694943) Rollback failed (0x8031001F). The operating system reported error 2150695019: Group Policy settings require the creation of a password. For other models its working fine, issue is only happening for model dell optiplex 9010 Regards Vivek

Microsoft Configuration Manager Deployment
Microsoft Configuration Manager Deployment
Microsoft Configuration Manager: An integrated solution for for managing large groups of personal computers and servers.Deployment: The process of delivering, assembling, and maintaining a particular version of a software system at a site.
610 questions
Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
6,049 questions
No comments
{count} votes

Accepted answer
  1. AllenLiu-MSFT 22,551 Reputation points Microsoft Vendor

    Hi, @Vivek TP
    Thank you for posting in Microsoft Q&A forum.
    Could you please have a more detailed and clearly description of your issue, it's better to use punctuation and divided into several paragraphs.

    And have we compared the smsts.log of dell optiplex 9010 with the logs of other models that works fine.

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    No comments

0 additional answers

Sort by: Most helpful