cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
kuvinod7
Punch Card
Posts: 62
Registered: ‎07-19-2017
Location: US
Views: 2,866
Message 31 of 79

Re: X270 Bitlocker requests recovery key every time

Please find it attached.

 

If we cancel the recovery key first time, it never prompts us to enter the recovery key again and the windows boots up.

Lenovo Staff
Lenovo Staff
Posts: 5,655
Registered: ‎10-29-2009
Location: NC
Views: 2,862
Message 32 of 79

Re: X270 Bitlocker requests recovery key every time

kuvinod7

 

The files you sent have the same contents.  It means the PCRs aren't changing, so this recovery event isn't because of a something in the TPM.  I just want to double-check something.  Did you collect 2.txt after entering the recovery key?  Or did you collect it after canceling the recovery key like you mentioned?

 

What I really want to see is 1.txt from the boot before the recovery prompt and then 2.txt from the boot immediately after entering the recovery key.  Is that what you provided?

kuvinod7
Punch Card
Posts: 62
Registered: ‎07-19-2017
Location: US
Views: 2,860
Message 33 of 79

Re: X270 Bitlocker requests recovery key every time

2.txt was collected by cancelling the recovery key prompt.

 

do you want to enter the recovery key and then do it ?

Lenovo Staff
Lenovo Staff
Posts: 5,655
Registered: ‎10-29-2009
Location: NC
Views: 2,858
Message 34 of 79

Re: X270 Bitlocker requests recovery key every time


@kuvinod7 wrote:

2.txt was collected by cancelling the recovery key prompt.

 

do you want to enter the recovery key and then do it ?


Yes, that's what I'm looking for.  It will give me the clue as to what caused the recovery prompt. 

kuvinod7
Punch Card
Posts: 62
Registered: ‎07-19-2017
Location: US
Views: 2,855
Message 35 of 79

Re: X270 Bitlocker requests recovery key every time

Doing it now. Also we have the BIOS at 1.14 level. Does it makes any difference ?

kuvinod7
Punch Card
Posts: 62
Registered: ‎07-19-2017
Location: US
Views: 2,851
Message 36 of 79

Re: X270 Bitlocker requests recovery key every time

Please find them attached

Lenovo Staff
Lenovo Staff
Posts: 5,655
Registered: ‎10-29-2009
Location: NC
Views: 2,843
Message 37 of 79

Re: X270 Bitlocker requests recovery key every time

 
The files you sent show that only PCR5 changed.  In legacy world, this PCR has to do with the MBR partition table.  After enabling BitLocker, do you ever resize partitions, or use a command like bcdedit to set/remove some boot device?
 
For example, I was able to recreate the situation where only PCR5 changed by shrinking my C: partition.  So are you doing anything like that?  Are you using bdeHdCfg.exe to prepare the drive?  If so, are you rebooting AFTER running bdeHdCfg.exe and before turning on BitLocker?
kuvinod7
Punch Card
Posts: 62
Registered: ‎07-19-2017
Location: US
Views: 2,841
Message 38 of 79

Re: X270 Bitlocker requests recovery key every time

We aren't doing any changes to the drives after enabling BitLocker. 

Also the model we use is - 20K5CTO1WW

 

BIOS upgrade required ?

Lenovo Staff
Lenovo Staff
Posts: 5,655
Registered: ‎10-29-2009
Location: NC
Views: 2,838
Message 39 of 79

Re: X270 Bitlocker requests recovery key every time

I'm on X270 BIOS version 1.17.  I did not test with 1.14.

kuvinod7
Punch Card
Posts: 62
Registered: ‎07-19-2017
Location: US
Views: 2,836
Message 40 of 79

Re: X270 Bitlocker requests recovery key every time

Am currently upgrading to 1.18 BIOS and testing it . Will let you know how it goes,

 

Anyways thanks again for all your help and would come back very soon.

Check out current deals!


Shop current deals

Top Kudoed Authors