Knowledge Base

Dell Controller H330 – Enabling “Host Guardian Hyper-V Support” or “Device Guard” on Windows Server 2016 causes OS boot failure


Enabling "Host Guardian Hyper-V Support" feature on Windows Server 2016 Datacenter edition causes Operating System boot failure via partition corruption. Controller card firmware H330 has to be updated to latest version (minimum 25.5.0.0019) before enabling the functionality.

Table of content

  1. Symptoms
  2. Solution
  3. Resources

1. Symptoms

The failure occurs after enabling this specific Windows Server 2016 feature running on a PERC H330 controller. The system will not be able to boot to the operating system. It requires reimaging the operating system or restoring it from backup. Although the failure regularly occurs on a VD with RAID-5, the failure could occur for other RAID levels as well under different circumstances (such as a RAID-1 VD in degraded state). All partitions created on the H330 controller are likely to be affected.

Note: As illustrated below, Standard & Essentials Editions of Windows 2016 does not have this feature to select from the features list, but can be impacted if Group Policy is used to enable Device Guard (see further details below).



The feature can be enabled/disabled from Server Manager as shown below:


Figure 1: Enable Host Guardian Hyper-V Support


Windows will fail to boot with the following error codes:

Boot Failed: Integrated RAID Controller 1: Windows Boot Manager

No boot device available or Operating System detected.
Please ensure a compatible bootable media is available.


The failure could also manifest itself in Machine Check state with the "NTFS File System" Stop code.



Figure 2: OS boot failure


Enable "Device Guard" using Group Policy


Enabling "Device Guard" Virtualization Based Security via Group Policy Management feature on Windows Server 2016 editions causes the same behavior.
The "Device Guard" feature can be enabled/disabled as shown below after enabling the Hyper-V role on the system:


Figure 3: Enable Device Guard using Policies

Back to top



2. Solution:


Before you enable the "Host Guardian Hyper-V Support" or "Device Guard" features, make sure that H330 firmware is updated to at least version 25.5.0.0019.

Applying H330 firmware version 25.5.0.0019 allows the above features to be enabled with no resulting OS boot issues.

Note: It is not recommended to enable this feature in production environments unless a specific Microsoft-supported scenario is being followed and thorough testing of your specific applications/process has been completed. Please see the Microsoft documentation at the link below for further information

https://technet.microsoft.com/en-us/itpro/windows/keep-secure/requirements-and-deployment-planning-guidelines-for-device-guard#hardware-firmware-and-software-requirements-for-device-guard



If you have not updated your H330 firmware version to 25.5.0.0019 and you have enabled either of the above features, but have not encountered the issue, disable the feature before the next OS reboot.
Once this issue has caused OS boot failure, the only options of which we are aware at this time to get the system running again are to reinstall the operating system again or restore from backup.

We are not aware of this issue impacting other Dell storage controllers.

Back to top

3. Resources

Additional Microsoft Device Guard Resources:


Need more help?
Find additional PowerEdge and PowerVault articles

Visit and ask for support in our Communities

Create an online support Request


Article ID: QNA44045

Last Date Modified: 09/21/2017 04:27 PM


Rate this article

Accurate
Useful
Easy to understand
Was this article helpful?
Yes No
Send us feedback
Comments cannot contain these special characters: <>()\
Sorry, our feedback system is currently down. Please try again later.

Thank you for your feedback.