ianp1231 Absent Member.
Absent Member.
4928 views

FDE will not encrypt disks

Hi Everyone,

I'm running a net-new ZCM 11.3 install and am having trouble with FDE.

I have a simple FDE policy, configured without PBE enabled, associated to a single Win7 workstation. Current Novell Client and ZENworks Adaptive Agent are installed and all current Windows Updates have been applied.

The drives will not encrypt though. When the policy is applied to the workstation it goes through all the motions and appears to be successful. FDE on the client though usually gets stuck at "Policy Being Applied" (even after the reboot forced by the policy) although will sometimes fall back to "No Policy Enforced" if I let it sit long enough.

I've tried this with multiple workstations (though all built from the same image... this image encrypts fine on our old 11.2.4 ZCM), multiple versions of the policy, and even completely different policies.

In each case, the following errors and warnings get logged on the client each time the policy is applied. I don't see any reference to these errors in the documentation...

Has anyone seen this?

Thanks,

Ian

Error:
Full Message:
Could not find a Handler associated with the following type: Full Disk Encryption Policy.
Additional Information:
None
Severity: Error
Date: April 8, 2014 10:22:47 AM
Acknowledged Date: None
Source: /Devices/Workstations/tor-ianp
Message ID: ActionMan.HandlerNotFound
Probable Cause URL: None
Log ID: 2bf5842476f04b842475dcc454a6ce25
Related Objects: None

Error:
Full Message:
Could not find a Handler associated with the following type: Full Disk Encryption Policy.
Additional Information:
None
Severity: Error
Date: April 8, 2014 10:22:47 AM
Acknowledged Date: None
Source: /Devices/Workstations/tor-ianp
Message ID: ActionMan.HandlerNotFound
Probable Cause URL: None
Log ID: 6cc2b17e5a1776386db7ac9580fa8b89
Related Objects: None

Warning:
Full Message:
The action Full Disk Encryption Policy (ID:Full Disk Encryption Policy) failed due to the reason : Could not find a Handler associated with the following type: Full Disk Encryption Policy., however the action is set to continue on failure.
Additional Information:
None
Severity: Warning
Date: April 8, 2014 10:22:47 AM
Acknowledged Date: None
Source: /Devices/Workstations/tor-ianp
Message ID: ActionMan.ActionContinueOnFailure
Probable Cause URL: None
Log ID: 0fed43d717b6ad0d50f0e85b516a8308
Related Objects: None

Warning:
Full Message:
The handler [NULL] was not found.
Additional Information:
None
Severity: Warning
Date: April 8, 2014 10:22:47 AM
Acknowledged Date: None
Source: /Devices/Workstations/tor-ianp
Message ID: ActionMan.ExeHandlerNotFound
Probable Cause URL: None
Log ID: 0eb0a5dc9637602f4367fa5c8fa7aabf
Related Objects: /Policies/Win7/Staff Encryption (No PBE)

Warning:
Full Message:
Could not find a Handler associated with the following type: Full Disk Encryption Policy.
Additional Information:
None
Severity: Warning
Date: April 8, 2014 10:22:47 AM
Acknowledged Date: None
Source: /Devices/Workstations/tor-ianp
Message ID: ActionMan.HandlerNotFound
Probable Cause URL: None
Log ID: a87d1a6e792b3fd8d298f891edf84083
Related Objects: /Policies/Win7/Staff Encryption (No PBE)

Warning:
Full Message:
The action Full Disk Encryption Policy (ID:Full Disk Encryption Policy) failed due to the reason : Could not find a Handler associated with the following type: Full Disk Encryption Policy., however the action is set to continue on failure.
Additional Information:
None
Severity: Warning
Date: April 8, 2014 10:22:47 AM
Acknowledged Date: None
Source: /Devices/Workstations/tor-ianp
Message ID: ActionMan.ActionContinueOnFailure
Probable Cause URL: None
Log ID: de434906afb9fdb4b33dc65ffb6aabdb
Related Objects: None

Warning:
Full Message:
Could not find a Handler associated with the following type: Full Disk Encryption Policy.
Additional Information:
None
Severity: Warning
Date: April 8, 2014 10:22:47 AM
Acknowledged Date: None
Source: /Devices/Workstations/tor-ianp
Message ID: ActionMan.HandlerNotFound
Probable Cause URL: None
Log ID: be711a0108c144bee714d6576872657d
Related Objects: None

Warning:
Full Message:
The handler [NULL] was not found.
Additional Information:
None
Severity: Warning
Date: April 8, 2014 10:22:47 AM
Acknowledged Date: None
Source: /Devices/Workstations/tor-ianp
Message ID: ActionMan.ExeHandlerNotFound
Probable Cause URL: None
Log ID: 4b8a73ef1677139ac9208ead88941767
Related Objects: None
0 Likes
8 Replies
danlebaron Absent Member.
Absent Member.

Re: FDE will not encrypt disks

Did you find a solution? I am having the same issue.
0 Likes
chalmerst Absent Member.
Absent Member.

Re: FDE will not encrypt disks

zzzzzzzzzzzzzzzzzzzz
0 Likes
luke_ross Absent Member.
Absent Member.

Re: FDE will not encrypt disks

chalmerst;2352524 wrote:
zzzzzzzzzzzzzzzzzzzz


On my virtual machines, it is enabling fine. On physical hardware, we am seeing the same issue. It starts when first applying policy with an event viewer message stating
Faulting application name: PBAInit.EXE, version: 9.7.3.1, time stamp: 0x53a1b6eb
Faulting module name: PBAInit.EXE, version: 9.7.3.1, time stamp: 0x53a1b6eb
Exception code: 0xc0000005
Fault offset: 0x00000000001ea01d
Faulting process id: 0x1b78
Faulting application start time: 0x01d08126d284cb5d
Faulting application path: C:\Windows\NAC\SBS\PBAInit.EXE
Faulting module path: C:\Windows\NAC\SBS\PBAInit.EXE
Report Id: 36feb7d3-ed1a-11e4-9dc7-8019348456dd

After this reboot, we are seeing the same "Could not find a Handler associated with the following type: Full Disk Encryption Policy" message.
0 Likes
martin_schukar Absent Member.
Absent Member.

Re: FDE will not encrypt disks

We have the same Warnings in ZCC here. But the policy seems to be working fine for us. There are just these "cosmetic" errors and warnings for encrypted Notebooks in ZCC. I think it is maybe an old bug, which was fixed for existing ZCM installations in the past. You can find an older threat to this problem here in forum. The bug seems to was fixed in the past for existing installations. Our ZCM is a new 11.3.2 installation too and the old bug seems to say hello again ;). Have already opened a SR (#10948304811) to this. I'l let you know the result here....
0 Likes
NovAlf Acclaimed Contributor.
Acclaimed Contributor.

Re: FDE will not encrypt disks

Hi!
Same problem here. ZCM 11.3.2.0, ZENworks Full Disk Encryption Version: 11.3.2.46600. Simple FDE policy wo PBA and ... "Could not find a Handler associated with the following type: Full Disk Encryption Policy.". Just first device to try on.
Any fresh info/ideas?
More thanks, Alar.
0 Likes
NovAlf Acclaimed Contributor.
Acclaimed Contributor.

Re: FDE will not encrypt disks

Hi again!
In device logs I see error "[Package novell-zenworks-fde-api-11.3.2.247.x86_64.msi failed to install with error code 1603.]". Could this be installed manually I wonder?
Alar.
0 Likes
NovAlf Acclaimed Contributor.
Acclaimed Contributor.

Re: FDE will not encrypt disks

In ZPA.status during Agent setup I see ...
---
KEY_PROGRESS_novell-zenworks-fde-api-11.3.2.247.x86-64.msi_63_66_95
KEY_PRE_AGENT_PKG_INSTALL_FAILURE_novell-zenworks-fde-api-11.3.2.247.x86_64.msi
KEY_PROGRESS_novell-zenworks-fde-sec-11.3.2.247.x86-64.msi_64_66_96
KEY_PRE_AGENT_PKG_INSTALL_FAILURE_novell-zenworks-fde-sec-11.3.2.247.x86_64.msi
KEY_PROGRESS_novell-zenworks-fde-11.3.2.46600.msi_65_66_98
KEY_PRE_AGENT_PKG_INSTALL_FAILURE_novell-zenworks-fde-11.3.2.46600.msi
---
And in zfde_install_log.txt ...
---
MSI (s) (24:40) [21:10:24:013]: Note: 1: 1722 2: CallFDEPrerequisiteCheckerAtInstall 3: C:\Windows\TEMP\{4009C00C-6449-442B-8BDF-224AA85498FD}\ 4: "C:\Windows\TEMP\{4009C00C-6449-442B-8BDF-224AA85498FD}\\FdePrequisiteChecker.exe" -in "C:\Windows\novell\zenworks\bin\downloads\dmi.ini"
CustomAction CallFDEPrerequisiteCheckerAtInstall returned actual error code -902 (note this may not be 100% accurate if translation happened inside sandbox)
MSI (s) (24:40) [21:10:24:013]: Product: Novell ZENworks Full Disk Encryption-x64 -- Error 1722. There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor. Action CallFDEPrerequisiteCheckerAtInstall, location: C:\Windows\TEMP\{4009C00C-6449-442B-8BDF-224AA85498FD}\, command: "C:\Windows\TEMP\{4009C00C-6449-442B-8BDF-224AA85498FD}\\FdePrequisiteChecker.exe" -in "C:\Windows\novell\zenworks\bin\downloads\dmi.ini"
Error 1722. There is a problem with this Windows Installer package. A program run as part of the setup did not finish as expected. Contact your support personnel or package vendor. Action CallFDEPrerequisiteCheckerAtInstall, location: C:\Windows\TEMP\{4009C00C-6449-442B-8BDF-224AA85498FD}\, command: "C:\Windows\TEMP\{4009C00C-6449-442B-8BDF-224AA85498FD}\\FdePrequisiteChecker.exe" -in "C:\Windows\novell\zenworks\bin\downloads\dmi.ini"
Action ended 21:10:24: CallFDEPrerequisiteCheckerAtInstall. Return value 3.
So, FdePrequisiteChecker.exe failed. Tried to run it from command-line, but wo visible feedback.
Alar.
0 Likes
NovAlf Acclaimed Contributor.
Acclaimed Contributor.

Re: FDE will not encrypt disks

Oh, well, seems to SED disks we use is not in compatible disks list and probably FDE just ... does not. Sorry to admit.
https://www.novell.com/documentation....html#b1akz1pw
Intel SSDSC2BF180A5L and Samsung MZ7TD256HAFV-000L9. (Btw, on both cases ZENworks inventory shows manufacturer as Hitachi-LG.)
Alar.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.