Windows password changed using CTRL+ALT+DEL doesn't synchronize with preboot authentication

Technical Articles ID: KB83345
Last Modified: 2023-04-17 09:32:21 Etc/GMT

Environment

Drive Encryption (DE) 7.x

For details of DE 7.x supported environments, see KB79422 - Supported platforms for Drive Encryption 7.x.

Problem

After you successfully install DE, Single Sign On (SSO) fails to capture a Windows user's new password.

When you change the Windows password using Ctrl+Alt+Del, and then restart the system, you're unable to authenticate at preboot using the new Windows password. The previous password successfully authenticates during preboot.

The logs show that policy enforcement is successful.

Uninstalling and reinstalling DE might not resolve the problem.

Cause

The registry key MfeEpeCredentialProvider is missing. The key is located under:

HKLM\\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{31348146-f794-4beb-9d39-e411bff979ee}

If the key is missing, any of the following can apply:

The third-party product has blocked the creation of the key
The third-party product has removed it after installation
A user action has caused a registry change that removed the key. Possible causes include security software protecting Windows registry keys, registry tools, System Restore, and corrupted system images

Solution

SSO doesn't function without the product credential registry key and string. Investigate whether the software you've installed either blocks the key from being created or removes the key after installation.

If the key is present, your issue has another cause. Contact Technical Support.

IMPORTANT: The following files are required for Technical Support:

Minimum Escalation Requirements (MER) files for your specific product. For information about downloading the MERs for each product, see KB59385 - How to use MER tools with supported products.
Other files and logs, as requested by Technical Support.

To contact Technical Support, go to the Create a Service Request page and log on to the ServicePortal.

If you are a registered user, type your User ID and Password, and then click Log In.
If you are not a registered user, click Register and complete the fields to have your password and instructions emailed to you.

Workaround

To re-create the keys, run the attached registry file EPECP.reg contained in EPECP.zip.

CAUTION: This article contains information about opening or modifying the registry.

The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly.
Before proceeding, Technical Support strongly recommends that you back up your registry and understand the restore process. For more information, see the Microsoft Windows registry information for advanced users article.
Do not run a REG file that is not confirmed to be a genuine registry import file.

Attachment

EPECP.zip
352Bytes • < 1 minute @ broadband

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Windows password changed using CTRL+ALT+DEL doesn't synchronize with preboot authentication

Environment

Problem

Cause

Solution

Workaround

Attachment

Affected Products

Languages:

Title

Title

Knowledge Center

Windows password changed using CTRL+ALT+DEL doesn't synchronize with preboot authentication

Environment

Problem

Cause

Solution

Workaround

Attachment

Affected Products

Languages:

Choose your region

Title

Title