Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 6 subscribers
  • Views 6150 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Credential Provider not loading after removing SafeGuard Encryption. Windows 7

JamieStevenson

Hello. We have a large number encrypted laptops that we need to uninstall SafeGuard from and then reinstall with a new version. I won't go into the nitty gritty but it is quite a massive undertaking of work.

Our laptops currently have a mix of Version 6 and Version 7. We are moving to Version 8.

The problem we are seeing is after uninstalling and unencrypting the laptop, they reboot and remove the POA fine but when windows loads we are left without a method of logging in to the laptop. The Windows credential provider is missing. This is happening on almost every laptop we do.

We have a work around for this but it is annoying especially as we have so many laptops to do this on. Basically reboot the laptop and load up Safemode. From there we can log in and once we have done that we restart the laptop and as if by magic the credential provider re-appears.

All our laptops are Windows 7 and all run in a Domain environment.

Just wondered if anyone could shed light on this. It would really help us speed up this process.

We are uninstalling the safeguard client via a script which removes the configuration first, then the preinstaller, and then finally the client.



This thread was automatically locked due to age.
  • FormerMember
    0 FormerMember

    Hey Jamie,

    Why are you uninstalling? Why don't you just install the new versions over the top? It will take about 1-2mins per machine as apposed to the 8+ hours to uninstall and decrypt.

  • 0 in reply to FormerMember

    Hi Toby,

    Part of our IT service used to be outsourced and our Safeguard Encryption was one of them. We are taking this back in house so now we have our own server and set up. Unfortunately the company who provided the service previously will not release the encryption keys (understandable i suppose) so we have no choice but to uninstall and then reinstall so the laptop gets new encryption keys from our server and can then be managed by us.

    That's as much as I know about that.

    Ulitmately we have no choice but to uninstall and reinstall

  • 0

    On one of the affected laptops have you checked for the Windows Cred reg fragment?

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers]

    and the value of {6f45dc1e-5384-457a-bc13-2cd81b0d28ed}

    I did experiment on removing this key to make that log on screen look a little more slick and easier for end users to understand. There can be issues removing this key but I wonder if in your case this key has been removed for the same reasons on some laptops (possible too with GPO so not necessarily a local setting (although possible to set it locally)?

    Could you try adding the key manually (export it from a Windows 7 unaffected machine - the keys do differ both in value and placement in OS versions) before that final reboot to add it back in it it's missing?

    I could of course be way off but might be worth a look?

    All the best

  • 0 in reply to MichaelMcLannahan

    Thanks for the suggestion. I have just tested the theory on one laptop and the registry keys were still there post uninstall so I don't think that is the problem here but I'll know for certain after tonight as I have a lot to kick off soon.

Unfiltered HTML