Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can't find windows boot manager after Disable PBA and Disable lockingrange #485

Open
fong09 opened this issue Dec 27, 2024 · 3 comments
Open

Comments

@fong09
Copy link

fong09 commented Dec 27, 2024

I am using sedutil on Windows, and the processes like loading PBA, enable lockingrange, and set lockingrange work fine. However, after I disable PBA and disable lockingrange, I am unable to find the Windows OS upon reboot. I have tried many different BIOS platforms, and this error occurs on all of them.I want to ask why this happens when I disable PBA and locking range, and the system cannot detect the boot partition for Windows BIOS.

I tried using the Bcdboot method to rebuild the boot partition. This method successfully recovered the missing OS boot manager. After performing Bcdboot once, no matter how many times I lock or unlock the device, the boot manager can always be recognized in the BIOS.

I want to know what happens during the process after disable PBA and disable lockingrange on windows that causes the BIOS to fail to recognize the device.

Thanks!

@r0m30
Copy link
Contributor

r0m30 commented Dec 28, 2024

hi,
Try this:
Set mbrdone on
set lockingrange 0 rw < rest of command >

I believe that when you disable locking some of the internal state flags are not set to be consistent with over arching state.

@fong09
Copy link
Author

fong09 commented Dec 30, 2024

hi, thank you for your responses. I have two questions for this:

1.The commands you provided, should I run them after sedutil-cli –-setMBREnable off or after sedutil-cli -–disableLockingRange 0 , or after both?

2.Regarding the unlocking process, do these two commands:

sedutil-cli -–disableLockingRange 0

sedutil-cli –-setMBREnable off

need to be executed in a specific order? Will their execution order have any impact?

@neo125874
Copy link

@r0m30 hello, same here, using nvme ssd on windows and follow
https://github.com/Drive-Trust-Alliance/sedutil/wiki/Encrypting-your-drive

it works using PBA, but when trying to disable Locking and the PBA
then couldn't boot into windows (the ssd not locked and the data exist)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants