English Community

ThinkPad NotebooksThinkPad: L, R and SL series Laptops
All Forum Topics
Options

6 Posts

10-07-2019

AT

5 Signins

135 Page Views

  • Posts: 6
  • Registered: ‎10-07-2019
  • Location: AT
  • Views: 135
  • Message 1 of 5

ThinkPad L590 cannot provision Bitlocker during SCCM task sequence

2019-10-09, 13:47 PM

Hello,

 

As mentioned in this post, we're having deployment issues with one of two identical ThinkPad L590s which were ordere in one batch. While the frist device was deployed successfully including a fully working Bitlocker agent, the second machine cannot enable Bitlocker within the SCCM task sequence.

In smsts.log the following error information is given:

  • "Failed to run the action: Enable BitLocker. 
    BitLocker Drive Encryption cannot be enabled on the operating system drive. Contact the computer manufacturer for BIOS upgrade instructions. (Error: 80310048; Source: Windows)"

After this the only ways to enable Bitlocker at all are either a startup password or using a USB-Stick which is not acceptable and employees will rather leave Bitlocker disabled, which violates our policy.

 

BIOS was upgraded to the latest version (v1.11) but that also didn't help. Any other ideas as to what could be done to preprovision Bitlocker during deployment?

Reply
Options

6434 Posts

10-29-2009

NC

17627 Signins

161493 Page Views

  • Posts: 6434
  • Registered: ‎10-29-2009
  • Location: NC
  • Views: 161493
  • Message 2 of 5

Re: ThinkPad L590 cannot provision Bitlocker during SCCM task sequence

2019-10-09, 14:28 PM

Can you enable BitLocker manually after deployment?  I wonder if this would give you a more helpful error message or clue as to what the problem is.

Reply
Options

6 Posts

10-07-2019

AT

5 Signins

135 Page Views

  • Posts: 6
  • Registered: ‎10-07-2019
  • Location: AT
  • Views: 135
  • Message 3 of 5

Re: ThinkPad L590 cannot provision Bitlocker during SCCM task sequence

2019-10-09, 14:33 PM

After the deployment finishes (Bitlocker provisioning runs as the last step in my sequence), I can boot into Windows and enable Bitlocker for my system drive, but I have to chose between specifying a startup password or using a USB stick at each boot.

Reply
Options

6434 Posts

10-29-2009

NC

17627 Signins

161493 Page Views

  • Posts: 6434
  • Registered: ‎10-29-2009
  • Location: NC
  • Views: 161493
  • Message 4 of 5

Re: ThinkPad L590 cannot provision Bitlocker during SCCM task sequence

2019-10-09, 15:34 PM

It sounds to me like you have some misconfiguration in your policies or image that is causing this problem.  I would focus on getting BitLocker to work post-deployment at first.  If you open TPM.msc, does it show a TPM with status "ready for use"?

Reply
Options

6 Posts

10-07-2019

AT

5 Signins

135 Page Views

  • Posts: 6
  • Registered: ‎10-07-2019
  • Location: AT
  • Views: 135
  • Message 5 of 5

Re: ThinkPad L590 cannot provision Bitlocker during SCCM task sequence

2019-10-10, 12:33 PM

 wrote:

It sounds to me like you have some misconfiguration in your policies or image that is causing this problem.  I would focus on getting BitLocker to work post-deployment at first.  If you open TPM.msc, does it show a TPM with status "ready for use"?


That was my first thought as well, but as I wrote in my initial post, another device of the same model and type was successfully deployed, including Bitlocker, a mere day before this one. If there would be a problem with the image (which is up to date) or with the task sequence, it would have failed on both devices.

 

TPM says in BIOS "TPM 2.0, enabled" and in Windows tpm.msc shows "ready to use".

 

Problem is now that we ran out of time and had to hand out the notebook to a newly arrived employee already, so I can't test on this devide anymore. Should we encounter this issue in the future I will update this thread or create a new one, possible with a solution we might have found by then. Thank you for your help anyways.

Reply
Forum Home

Community Guidelines

Please review our Guidelines before posting.

Learn More

Check out current deals!

Go Shop
X

Save

X

Delete