\Boot\BCD error message

Daniel,

Were you able to get a resolution to this issue. We are having the same problem on Dell systems.  Not all of them are the E6410's though.  We have updated to the latest Dell BIOS which shows is fixes an issue with Sophos Preboot Authenication.

--Forrest

Guys, call support. There's a special WInPE "BootRec" CD image (iso) that is available and instructions on how to repair this. There's hardly ever a need to rebuild. We had the same issues (funny how this looks to be an issue with SGN on Win7) and used instructions and CD and all were resolved. I would post the link to it and instructions here, but not sure if this is against the rules.

Dimitri,

Please feel free to post these instructions.

Sophos Support

MESSAGE FROM MODERATOR

Please note the following is not an approved solution, and is not endorsed or supported by Sophos.

This is an area we are currently investigating.

Sandy

Communities Moderator

OK, here goes. You must download and burn a special BootREC WInPE ISO, contact support for your download link.

* boot to WinPE after the POA authentication
* confirm that data on drive C is accessible
* open command prompt
* navigate to C:\boot * run command: bootrec /fixmbr. Expected outcome: "The operation completed successfully."
* run command: bootsect /nt60 all /force. Expected outcome: "Target volumes will be updated with BOOTMGR compatible bootcode. (...) Bootcode was successfully updated on all targeted volumes".
* run command: del C:\boot\bcd /p. Expected outcome: Delete (Y/N)
* select Yes(Y)
* press Enter
* run command: bootrec /rebuildbcd. Expected outcome: "(...) Successfully scanned Windows installations: 1 Add installation to boot list? Yes(Y)/No(N)/All(A):"
* select 'Yes(Y). Expected outcome: "The operation completed successfully."
* press Enter
* remove WinPE
* restart
* test - boot from the hard drive

This is it folks! In some cases, I'm told, a be_restore is also needed to be run, but I haven't come across this case just yet.

 Hi,

a few words of explanation, as I'm involved in troubleshooting this error at our end:

1. Some generic information about this issue can be found on the Microsoft website: http://support.microsoft.com/kb/927391
2. There is no information about the cause of the error (what is being reported quite frequently as the last thing done on the affected machine is Windows Update)
3. Error itself is not caused by Safeguard (Running simple Google search for "File: \Boot\BCD error" will give you a really long list of cases) and it's very easy to recreate on non-SafeGuard machine.

4. The difficulty in recovery a SafeGuard encrypted machine is caused by a fact that you cannot use standard Windows 7 installation DVD or WinPE

What we are testing is adding Windows recovery tools to our WinPE disk (the one you download from our website  (http://www.sophos.com/support/knowledgebase/article/108805.html)

Right now we have a 100% success rate so we know it works. The problem is that the recovery procedure itself still gets adjusted and changes as more cases are reported and for that reason we still treat it as 'experimental'. For example: the procedure posted above by Dimitri worked in his (and few other cases) but in other cases we've noticed that for example WinPE can enumerate your hidden partition (100MB) as C:\ and your system drive as D:\ so you need to change your commands accordingly.

In other cases it was enough to run "Bootrec /RebuildBcd" and problem was fixed (which didn't work in Dimitri's case). In yet another case user had to fixMBR at the end of the procedure but in other cases it was not necessary.


So the bottom line is: yes, it looks like we can fix it but please do contact Sophos Technical Support to get the most up to date version of the troubleshooting procedure and a link to the modified WinPE iso.

Once we have it thoroughly tested I'm sure we will publish it on our website.

Hi, one of our customer has this same exact issue with one desktop (Dell Optimex 380) and four laptops (Dell latitude E5500). All of these machines were installed with Sophos SafeGuard Client 5.50.8. All had Windows 7 Pro 32-bit OS w/ SP1. All of them worked perfectly for a week or so after SafeGuard install, and all fixed disks are volumen encrypted. After a week or so, one by one these machines started ending up with "unable to find file boot\bcd" exception immediately after successful authentication/authorization at the POA. Customer ended up formatting and reinstalling the OS.

Ironically, after OS reinstall and SafeGuard install this "unable to find file boot\bcd" exception does not reoccur.

Any suggestions to get to the root cause? as customer has other dozens of same branded desktops/laptops which are to be encrypted, and does not want to rebuild all of them after SafeGuard install.

Thank you in advance for any pointers.

Reg.

AlertBoot Team

Hello, I have done the procedure described by dimitri  and works properly, but this problem to me often and on a variety of notebook there is a way to solve?? every month I have to restore

Hi,

How can I use the Sophos WinPE? I booted it up and noticed that my encrypted C & D drive shows as D & E drive with access denied. C: was taken over by System Reserved.

Dear Kelvin,

Base on my experience, here is the step to resolved the \boot\bcd error message:

Tools to ready:

1. WinPE CD

    - create a bootable WINPE CD accordingly to the version of your SGN Client installed

2. Virtual Recovery Token

     - go to Safeguard Management Center - Keys & Certificates - Virtual Clients - Add new Virtual Client - Export Virtual Client

     - file type should be 'recoverytoken.tok'

How to open encrypted drive:

http://www.sophos.com/sophos/docs/eng/manuals/Utimaco/KBA/108805.pdf

How to fix the \boot\bcd:

http://www.sophos.com/support/knowledgebase/article/112846.html

Hope this help.

on the Command line: Bootrec /RebuildBcd

but my Safeguard PE CD tell me, there isnt a Command.. Bootrec and there is no bootrec.exe... :-P

What can i do now?