Disk Encryption

%3CLINGO-SUB%20id%3D%22lingo-sub-98033%22%20slang%3D%22en-US%22%3EDisk%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-98033%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDoes%20any%20know%20if%20you%20can%20encrypt%20a%20disk%20when%20using%20the%202016-Datacenter-Server-Core%20image%20from%20Microsoft%3F%20When%20I%20try%20it%20comes%20up%20with%20an%20error%20%22Failed%20to%20configure%20bitlocker%20as%20expected.%20Exception%3A%20The%20system%20cannot%20find%20the%20file%20specified%22.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETrevor%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-98033%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EEncryption%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EVirtual%20Machine%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-100031%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Disk%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-100031%22%20slang%3D%22en-US%22%3E%3CP%3EI%20found%20this%2C%20it%20has%20a%20troubleshooting%202016%20core.%3C%2FP%3E%3CP%3Eit%20appears%20a%20feature%20is%20missing%20from%20core%20by%20default.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsecurity%2Fazure-security-disk-encryption-tsg%23troubleshooting-windows-server-2016-server-core%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsecurity%2Fazure-security-disk-encryption-tsg%23troubleshooting-windows-server-2016-server-core%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%20class%3D%22lf-text-block%20lf-block%22%3EOn%20Windows%20Server%202016%20Server%20Core%2C%20the%20bdehdcfg%20component%20is%20not%20available%20by%20default.%20This%20component%20is%20required%20by%20Azure%20Disk%20Encryption.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-100030%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Disk%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-100030%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20tried%20all%20that.%20It%20would%20appear%20disk%20encryption%20does%20not%20work%20on%20the%202016%20server%20core%20image%20as%20I%20used%20the%202016-Datacenter%20image%20and%20the%20disk%20encryption%20worked%20fine.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETrevor%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-98080%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Disk%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-98080%22%20slang%3D%22en-US%22%3E%3CP%3EAlso%20i%20found%20another%20guide%20that%20i%20prefer%20to%20the%20last%20one%20i%20sent.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsecurity-center%2Fsecurity-center-disk-encryption%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsecurity-center%2Fsecurity-center-disk-encryption%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-98078%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Disk%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-98078%22%20slang%3D%22en-US%22%3E%3CP%3EOk%2C%20did%20the%20machine%20reboot%20once%20you%20ran%20the%20commands%20%3F%3C%2FP%3E%3CP%3EI%20have%20had%20a%20few%20problematic%20encounters%20getting%20this%20to%20work%20on%20some%20VM's%20as%20well.%3C%2FP%3E%3CP%3Ethey%20would%20constantly%20state%20a%20reboot%20was%20required%2C%20and%20this%20just%20went%20on.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20ended%20up%20disabling%20the%20encyption%20using%20Azure%20Powershell%20commands%2C%20and%20disabling%20it%20in%20the%20OS.%3C%2FP%3E%3CP%3Ethen%20rerunning%20the%20guide.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eone%20thing%20you%20could%20verify%2C%20is%20the%20the%20drive%20containing%20the%20encryption%20key%20present%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-98060%22%20slang%3D%22en-US%22%3ERe%3A%20RE%3A%20Disk%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-98060%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYes%20I%20have%20followed%20this%20guide%20but%20it%20still%20reports%20the%20same%20error%20message.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETrevor%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-98043%22%20slang%3D%22en-US%22%3ERE%3A%20Disk%20Encryption%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-98043%22%20slang%3D%22en-US%22%3EDid%20you%20follow%20this%20guide%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsecurity%2Fazure-security-disk-encryption%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Fsecurity%2Fazure-security-disk-encryption%3C%2FA%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi,

 

Does any know if you can encrypt a disk when using the 2016-Datacenter-Server-Core image from Microsoft? When I try it comes up with an error "Failed to configure bitlocker as expected. Exception: The system cannot find the file specified".

 

Trevor

6 Replies

Hi,

 

Yes I have followed this guide but it still reports the same error message.

 

Trevor

Ok, did the machine reboot once you ran the commands ?

I have had a few problematic encounters getting this to work on some VM's as well.

they would constantly state a reboot was required, and this just went on.

 

I ended up disabling the encyption using Azure Powershell commands, and disabling it in the OS.

then rerunning the guide.

 

one thing you could verify, is the the drive containing the encryption key present ?

Also i found another guide that i prefer to the last one i sent.

https://docs.microsoft.com/en-us/azure/security-center/security-center-disk-encryption

Hi,

 

I tried all that. It would appear disk encryption does not work on the 2016 server core image as I used the 2016-Datacenter image and the disk encryption worked fine.

 

Trevor

 

I found this, it has a troubleshooting 2016 core.

it appears a feature is missing from core by default.

https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption-tsg#troubleshooting-w...

 

On Windows Server 2016 Server Core, the bdehdcfg component is not available by default. This component is required by Azure Disk Encryption.