Jump to content

Recommended Posts

Posted

Hi Guys,

 

Im trying to setup and enable Bitlocker during my SCCM task sequence which i know is working as I have managed to image a Dell machine and once i log in can see Bitlocker is enabled and can also see the recovery key in AD for that computer object. I am having great difficulty though with my HP machines and they always fail imaging. I am fairly certain it is because the bios isn't configured properly and TPM isn't active therefore BitLocker cannot be turned on. The bios on these machines are far from obvious and descriptive when it comes to setting up the TPM and i was wondering if any of you guys have had any luck and if so can you let me know what settings you used please?

Posted
What are the client logs saying when the image is failing?

 

There's a ton of failures but the below is basically the first lot. Its fairly obvious from these logs entries that its because TPM is disabled but i just cant get the correct settings in the bios.

 

Initializing TPM...

Tpm is disabled

Tpm is not activated

Tpm is owned

Tpm ownership is allowed

uStatus == 0, HRESULT=80280007 (..\tpm.cpp,503)

'IsSrkAuthCompatible' failed (2150105095)

Tpm does not have compatible SRK

Tpm has EK pair

Initial TPM state: 44

(dwTpmState & Tpm::State_Enabled) != 0, HRESULT=80004005 (offlinebitlocker.cpp,79)

TPM cannot be enabled without physical presence

TPM is not found or not enabled. Ignore this action.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...