Skip to main content

BitLocker: MBAM Installation Errors

This lists some of the common errors encountered during MBAM installation.

This article applies to: BitLocker


TPM Off or Does Not Exist

 

Reboot into BIOS (F2 at POST). In the TPM Security section, make sure the boxes are checked. Click Apply.

Exit BIOS. The computer will reboot. Re-run the MBAM installer.

TPM Already Owned

Reboot into BIOS (F2 at POST). In the TPM Security section, check Clear, then click Apply.

Exit BIOS. The computer will reboot. Re-run the MBAM installer.

(If you cannot check Clear, check Activate instead. Exit BIOS, then return to BIOS. You should now be able to check Clear.)

Battery Power

The computer should be plugged into a power source during the install process.

Troubleshoot the MBAM Task Sequence

Sometimes the MBAM Task Sequence will get stuck at the GPUPDATE step, which leaves your computer with an active, owned TPM and no MBAM.

Check for the following.

One: Has the MBAM GPO applied?

Run cmd.exe as an administrator, then run RSOP. Click Close on the resulting Group Policy Error. A Resultant Set of Policy window will open.

Right-click Computer Configuration, then select Properties.

You should see the policy (MD-MBAM-Settings-Only-Policy_prod_1) on the list. Check Display all GPOs and filtering status to see if the policy was Applied or Denied.

Two: Has the MBAM 300MB partition been created, and is it flagged as a system partition?

Run Disk Management (diskmgmt.msc) as an administrator and verify the disk layout.

If the partition is missing, run chkdsk /r on the drive, then re-run the application install (or manually execute "bdehdcfg.exe -target default").

Three: Has the MBAM client been installed?

In Control Panel - Programs and Features, check for MDOP MBAM.

About this Article

Last updated: 

Tuesday, July 7, 2020 - 4:23pm

Audience: 

IT Professionals

Operating System: 

Windows

Was this page helpful?

Your feedback helps improve the site.

Comments?