SetBIOSSetting: Dependency Condition is not met returnCode="32769"

This error happened on HP 6565b:


<BIOSCONFIG Version="2.60.13.1" Computername="Win7-comp1" Date="2014/02/21" Time="10:53:06" UTC="-5" >
<SETTING changeStatus="fail" name="Embedded Security Activation Policy" reason="SetBIOSSetting: Dependency Condition is not met" returnCode="32769">
    <OLDVALUE><![CDATA[F1 to Boot]]>
    <NEWVALUE><![CDATA[No prompts]]></SETTING>
<SETTING changeStatus="fail" name="Activate Embedded Security On Next Boot" reason="SetBIOSSetting: Dependency Condition is not met" returnCode="32769">
    <OLDVALUE><![CDATA[Disable]]>    <NEWVALUE><![CDATA[Enable]]></SETTING>
<ERROR msg="Failed to set BIOS config" />
<Warning msg="BCU return value" real="16" translated="16" />
</BIOSCONFIG>

This issue was detected using Biosconfig.exe utility to modify BIOS Value and to activate TPM  on the specified model.

Possible cause: The right BIOS password was not used to access and modify BIOS Values.
Verifying...

Solution:

BIOS password needs to be set.

This can be done by adding the two commands: 

 

biosconfigutility.exe /nspwd:xxxxx 

biosconfigutility.exe /cspwd:xxxxx /setconfig:test.txt

Invalid namespace (Error: 8004100E; Source: WMI)

SCCM TS Deployment of BitLocker failed with this error in local machine smsts.log file:

Invalid namespace (Error: 8004100E; Source: WMI)

Also SCCM Deployment log shows this error:

The task sequence execution engine failed executing the action (BitLocker ) in the group () with the error code 2147749902
Action output: ==============================[ OSDBitLocker.exe ]==============================
Command line: "OSDBitLocker.exe" /enable /wait:True /mode:TPM /pwd:AD
Failed to open namespace 'root\CIMv2\Security\MicrosoftVolumeEncryption' (0x8004100E)

To resolve this issue WMI repository should be recreated and BitLocker SCCM TS will start with encryption on C: drive.

For WMI repository recreation you can use SCCM Client Center tool:

http://sourceforge.net/projects/smsclictr/

Failed to set log directory. Some execution history may be lost. The system cannot find the file specified. (Error: 80070002; Source: Windows)

SCCM Task Sequence during execution failed. Log file smsts.log shows following error message:

Failed to set log directory. Some execution history may be lost. The system cannot find the file specified. (Error: 80070002; Source: Windows)

This error message points to MS Support site:

http://support.microsoft.com/kb/2894518

As it is specified in the article it explains that the issue is caused by multiple restarts inside the Windows Software Updates.
In this case was another restart after finishing Windows Software Updates TS step:

BitLocker encrypting commands for Fixed drives (non OS)

To encrypt manually Non OS - Fixed drive, in our case D: partition, these two command should be used:

manage-bde –on D: -RecoveryPassword

manage-bde –autounlock –enable D:

First command starts  encryption of D: partition and write Recovery password in AD.

Second command enables autounlock of D: partition. 

There is no need to wait encryption to finish to execute the second command.

To write Recovery password in AD requirement is to have GPO for BitLocker configured.

ADM Template for Date format - Short and Long Style

Here is the template for Date format - Short and Long Style

CLASS USER

CATEGORY "Control Panel"

        CATEGORY "Regional Settings"

            POLICY "Specify Date Settings"

             KEYNAME "Control Panel\International"

            EXPLAIN !!expSetDateFormat

                        PART "Short date style"  DROPDOWNLIST REQUIRED

                        VALUENAME "sShortDate"

                        ITEMLIST

                                    NAME "M/d/yy"            VALUE "M/d/yy"

                                    NAME "M/d/yyyy"          VALUE "M/d/yyyy"

                                    NAME "MM/dd/yy"          VALUE "MM/dd/yy"

                                    NAME "MM/dd/yyyy"        VALUE "MM/dd/yyyy"

                                    NAME "yy/MM/dd"          VALUE "yy/MM/dd"

                                    NAME "dd-MMM-yy"         VALUE "dd-MMM-yy"

                    NAME "yyyy/MM/dd"        VALUE "yyyy/MM/dd"                       

            NAME "dd.MM.yyyy"        VALUE "dd.MM.yyyy" DEFAULT

                        END ITEMLIST

                        END PART       

                        PART "Long date style"   DROPDOWNLIST REQUIRED

                        VALUENAME "sLongDate"

                        ITEMLIST

                NAME "dddd d MMMM yyyy"        VALUE "dddd d MMMM yyyy" DEFAULT

                                NAME "dddd MMMM dd, yyyy"     VALUE "dddd MMMM dd yyyy"

                                NAME "MMMM dd yyyy"           VALUE "MMMMdd yyyy"

                                NAME "dddd dd MMMM yyyy"      VALUE "dddddd MMMM, yyyy"

                                NAME "dd MMMM yyyy"           VALUE "dd MMMM yyyy"

                NAME "MMMM d, yyyy"           VALUE "MMMM d, yyyy"

                        END ITEMLIST

                        END PART

                    END POLICY

        END CATEGORY

END CATEGORY

[strings]

expSetDateFormat="Specifies the format for client default date format"

View the BitLocker Recovery Keys in AD

In order Help Desk Support Team to see BitLocker Recovery Keys in AD they must have appropriate permissions.

MS provided a script that should be executed on Domain Controller and will allow to the members of the specified AD Security Group to have Read permissions on BitLocker objects in AD.

Here is the link from MS. The script for delegating permission in AD is in Appendix A:

http://technet.microsoft.com/en-us/library/cc771778(WS.10).aspx#BKMK_AppendixA

How to obtain the BitLocker Recovery Password Viewer tool

To obtain the BitLocker Recovery Password Viewer tool for Windows Server 2008, Windows Vista and older OS here is the link :

http://support.microsoft.com/kb/928202

For Windows 7 first RSAT (Remote Server Administration Tools for Windows 7 with SP1) should be installed and after that from Turn WindowsFeatures on or off  »BitLocker Recovery Password Viewer« can be installed.

http://technet.microsoft.com/en-us/library/dd875531(v=ws.10).aspx

For Windows Server 2008 R2 it is in »Add Features«, »Remote Server Administration Tools«,  »Feature Administration Tools«, »BitLocker Diver Encryption Administration Utilities« and select »BitLocker Recovery Password Viewer«.