Bitlocker: safeboot has been corrupted (error 92h) 2

[woter324]

I have a tail of woe that I am hoping someone can help me solve.

I have an HP Compaq 8510w running Win7 Enterprise (64-bit, RTM) with one physical drive and two logical drives, C: & D:

After HP finally released the Windows 7 HP Protect Tools, I set everything up like finger print etc.

I finally set up bitlocker via HP ProtectTools and left it to run overnight on C: and D:. Next day I reboot to be presented with:
safeboot has been corrupted (error 92h)

This comes up before windows even tries to load.

I read a post that suggested runningbootrec /fixmbr from Windows Recovery Console (WinRC) which I did. Bitlocker asked for decryption keys that I had on USB key. I was able to boot back into Windows. All well and good except my D: is dead. It is visible as D: in My Computer but I cannot do anything except format. No thank you. All my data is on that disk. Bitlocker doesn't recognose it. :-(.

Does the MBR hold information about other volumes or only the boot drive.

I never used vista and all the BCD stuff is new to me.

Would anyone be able to shed some light on what has happened or more to the point how I may go about recovering my D:?

I'd be most grateful for any pointers or suggestions.

Not sure if it matters, but I have TPM enabled.

TIA

 

[linney]

I am not familiar with HP Protect software but I notice that Bitlocker states that Extended drives and Logical drives are not supported.

Description of the BitLocker Drive Preparation Tool

http://support.microsoft.com/kb/933246

Perhaps you should be knocking on HP Support's door?

You can try these data recovery tools on your logical drives, they are free to try but cost if they look like they can help.

http://www.restorer2000.com

http://www.runtime.org/hints.htm.

 

[woter324]

Thanks linney.

I guess as bitlocker is new(ish) there isn't a great deal of help or at least not many people have had problems with it yet.

I should have mentioned that all though I used HP Protect Tools, the Bitlocker section farms off to the Windows 7 tool.

At first I would have asked HP for help, but I think it is MS as the bitlocker tool HP uses is MS's. I wonder why it allows you to protect a logical volume if it's not supported. Unless it is under Win7. I notice the document link doesn't mention 7.

When I say a logical volume, I meant I have one harddrive that I partitoned down the middle. Is that a logical volume?

Thanks again.

 

[linney]

To see what your hard drives (and Partitions) are, of course that is if they a are visible, you can look in Disk Management in MMC. (Right-click the My Computer icon and select Manage)

I imagine Microsoft are quite a bit behind with their MSKB articles and updated documentation. The following article is even older too.

See the paragraph "Reviewing basic disks" for distinction between types of partitions.

Choosing the Right Disk Storage for Your W2K System

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnwinpro01/html/winpro0900.asp

 

[woter324]

Hi,

Still trying. I found this website. A person with a similar problem. All though he outlines the process he used to regain his data, it is very high level.

As my C: is fine, I don't think I need to configure a new computer. I do have Acronis Disk Director 10 that allows me to modify the partition table.

I took a copy of the HEX table of the C: before turning off bitlocker and compared afterwards. The main difference was the NTFS leters in the first part of the table. In the encrypted disk there were strange characters and once unencrypted, it had NTFS. I changed:

From:
95 96 E9 AD 23 99 B8
To:
95 96 E9 4E 54 46 53

4E 54 46 53 = NTFS


I wonder if anyone would be able to provide a more in depth idea of what I should do as the above didn't work

Many thanks (as always)

Woter

 

[woter324]

I've found a link (here) to a forum that details the cause and where to go for a possible solution to my issue.


Unfortunatly it looks like I will need HP to provide this 'Daily Authorisation Code' they talk about in the post. I guess I should be able to get it from this HP site that isn't working properly and according to a google result hasn't been for a long time.

It's looking more likely that it's my use of HP's 3D Drive Guard, part of their Protect Tools security suite. AKA Safeboot (I think) now owned by McAfee. Whether it was bitlocker that cause the issue or not I cannot say.

I'm raising a call with HP and referencing this site to describe full details of my issue as it's all covered here.

If I get lucky, I will post here.

Thanks

 

[linney]

Thanks for the feedback so far, do let us know how things turn out.

 

[woter324]

[!]Success!![/!]

I have my data back. No thanks to HP (no) support.

My thanks goes out to Jason Hardy on the HP support forums for providing the safetech tool. Here is a link to the HP forum.

I'll write a detailed report later, but for now the key thing was to change the date and time to match one of the 'day codes' posted in the link. I used 1131 for 27/10/2009 (ddmmyyyy).

I tried many of the options, most failed with "Client is not active" errors. (maybe because I used Win7 to build BartPE with Safeboot plugin and PEBuilder isn't supported on Win7).

In the end, I used the force decrypt option that actually failed after 48 hrs. I thought the game was up. Restarted my laptop and there was the drive waiting for me to enter the Bitlocker password.

Moral of the story. NEVER EVER use HP Protect Tools Drive Encryption utillity, as HP clearly don't have a clue.

 

[linney]

Thank you once more for this important feedback.