This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SG8/Win10 - Sector-based initial encryption of drive C: failed and closed. Reason: 12496897 (0x00BEB001).

We are receiving this error when trying to perform initial BitLocker encryption after installing the agent and settings. I can only find reference to this error code in the SGN7 PDF located here: https://www.sophos.com/en-us/medialibrary/PDFs/documentation/sgn_7_h_eng_admin_help.pdf?la=en

It shows the details as "Encryption not possible due to error during kernel initialization." What does this mean?

This thread was automatically locked due to age.

Parents

0 MichaelMcLannahan over 7 years ago

Are you using C/R (Challenge and Response) or standard BitLocker Lloyd?
Cancel
Vote Up 0 Vote Down

Cancel
0 Lloyd Jones over 7 years ago in reply to MichaelMcLannahan

Michael,

We are using standard BitLocker (the one with the standard C/R recovery mechanism, not the Sophos C/R mechanism).
Cancel
Vote Up 0 Vote Down

Cancel
0 MichaelMcLannahan over 7 years ago in reply to Lloyd Jones

Hi Lloyd - Thanks for that. I am not aware there's another C/R here though, just the Sophos one?

I had many issues with reliability of Sophos C/R and the fact that it's only officially supported by very few models - no HP's for example!

https://community.sophos.com/kb/en-us/120433

Sophos C/R is very fussy about exactly what configuration it likes - UEFI, Secure boot etc... If you need to make these changes too on a working live system you may find it'll result in a non-booting system that you'll need to set up again!

I decided against C/R because of these issues and limitations. I would suggest your issue could be similar. There's something on that PC that isn't configured as per the Sophos C/R requirements. I would either reconfigure (most of the time it was UEFI and not legacy/CSM BIOS for me) the laptop to get the config spot on (as per linked guide which I note has recentyly changed to exclude MS Surface!! I've had many issues there!!!!) and then C/R will be happy or not use C/R...

I appreciate C/R is seen as more secure with a rolling recovery key but....
Cancel
Vote Up 0 Vote Down

Cancel
0 Lloyd Jones over 7 years ago in reply to MichaelMcLannahan

Michael,

Sorry, just wanted to clarify that we are using the Sophos C/R (I was mistaken). Let me look at that guide and see if it helps. These are all Dell laptops by the way. I'll post again after getting my hands on the machine.
Cancel
Vote Up 0 Vote Down

Cancel
0 MichaelMcLannahan over 7 years ago in reply to Lloyd Jones

Cool - Good luck!
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 MichaelMcLannahan over 7 years ago in reply to Lloyd Jones

Cool - Good luck!
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data