craigcamacho Posted May 28, 2018 Posted May 28, 2018 Hi Guys, Im trying to setup and enable Bitlocker during my SCCM task sequence which i know is working as I have managed to image a Dell machine and once i log in can see Bitlocker is enabled and can also see the recovery key in AD for that computer object. I am having great difficulty though with my HP machines and they always fail imaging. I am fairly certain it is because the bios isn't configured properly and TPM isn't active therefore BitLocker cannot be turned on. The bios on these machines are far from obvious and descriptive when it comes to setting up the TPM and i was wondering if any of you guys have had any luck and if so can you let me know what settings you used please?
azureusnation Posted May 28, 2018 Posted May 28, 2018 What are the client logs saying when the image is failing?
craigcamacho Posted May 28, 2018 Author Posted May 28, 2018 What are the client logs saying when the image is failing? There's a ton of failures but the below is basically the first lot. Its fairly obvious from these logs entries that its because TPM is disabled but i just cant get the correct settings in the bios. Initializing TPM... Tpm is disabled Tpm is not activated Tpm is owned Tpm ownership is allowed uStatus == 0, HRESULT=80280007 (..\tpm.cpp,503) 'IsSrkAuthCompatible' failed (2150105095) Tpm does not have compatible SRK Tpm has EK pair Initial TPM state: 44 (dwTpmState & Tpm::State_Enabled) != 0, HRESULT=80004005 (offlinebitlocker.cpp,79) TPM cannot be enabled without physical presence TPM is not found or not enabled. Ignore this action.
azureusnation Posted May 28, 2018 Posted May 28, 2018 Okay. Looks lile there is no TPM chip in that system.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now