Drive Encryption fails to reactivate after deactivation using WinPE DETech

Technical Articles ID: KB94430
Last Modified: 2023-04-05 06:14:29 Etc/GMT

Environment

Drive Encryption (DE) 7.3.0, 7.2.x

WinPE DETech Disaster Recovery Media

Problem

After you deactivate DE using the WinPE DETech tool, it fails to reactivate on policy enforcement after a restart.

Cause

During deactivation of DE using the WinPE DETech tool, file attributes of certain files are modified unintentionally.

The attributes of the following files are set to Hidden:

EFI\Microsoft\Boot\bootmgfw.efi
EFI\Boot\bootx64.efi

Solution

This issue is resolved with DE 7.3.0 Hotfix 1.

Issue resolutions in updates and major releases are cumulative; Technical Support recommends that you install the latest version. To find the most recent release for your product, go to the Product Downloads site.

Our product software, upgrades, maintenance releases, and documentation are available on the Product Downloads site.

NOTE: You need a valid Grant Number for access. See KB56057 - How to download product updates and documentation for more information about the Product Downloads site, and alternate locations for some products.

Workaround

As a workaround, reset the hidden attribute of the following affected files:

Mount the EFI partition using an administrator command prompt:

mountvol g: /S
Run the following commands:
- attrib -H EFI\Microsoft\Boot\bootmgfw.efi
- attrib -H EFI\Boot\bootx64.efi
Perform a policy enforcement.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Drive Encryption fails to reactivate after deactivation using WinPE DETech

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Drive Encryption fails to reactivate after deactivation using WinPE DETech

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title