That's indeed an interesting problem DDPE + Win10 + Hyper-V should all co-exist together. I am actually running our 8.12.0.26 release on my W10 workstation and use Hyper-V daily.
Depending on the server version you are running there might be some exclusions we need to add for the SDE protection. Below is a list of the current default SDE polices the 9.8 server ships with.
It's possible that if the \EFI\ exclusion was not in place there is a MS Update that will mount the hidden system partition and that will get encrypted. Once that happens having the windows setup that matches the installed version of W10 that was on the machine and using the repair computer option to do a startup repair. Details on that procedure can be found in the KB linked below if needed.
If you're not sure about the version of Windows 10 that was previously on the machine it might be best to remove all partitions during the windows setup and having it build a completely new layout.
I have not. What are you seeing? It's possible the machine might need a SDE recovery after that role is removed because of how it treats the OS when the role is installed.
Dell-StephenO
2 Intern
•
158 Posts
0
August 9th, 2017 14:00
Hi Jason,
That's indeed an interesting problem DDPE + Win10 + Hyper-V should all co-exist together. I am actually running our 8.12.0.26 release on my W10 workstation and use Hyper-V daily.
Depending on the server version you are running there might be some exclusions we need to add for the SDE protection. Below is a list of the current default SDE polices the 9.8 server ships with.
F#:\
-^%ENV:SYSTEMDRIVE%\System Volume Information
-^%ENV:SYSTEMROOT%\;dll.exe.sys.ocx.man.cat.manifest.policy
-^%ENV:SYSTEMROOT%\System32
-^%ENV:SYSTEMROOT%\SysWow64
-^%ENV:SYSTEMROOT%\WinSxS
-^%ENV:SYSTEMROOT%\Fonts
-^3@%ENV:SYSTEMROOT%\SYSTEM32\cmd.exe;exe
-^3@%ENV:SYSTEMROOT%\SYSTEM32\autochk.exe;exe
-^3@%ENV:SYSTEMROOT%\SYSTEM32\winresume.exe;exe
-^F#:\bootmgr
-^F#:\boot
-^3F#:\EFI\
It's possible that if the \EFI\ exclusion was not in place there is a MS Update that will mount the hidden system partition and that will get encrypted. Once that happens having the windows setup that matches the installed version of W10 that was on the machine and using the repair computer option to do a startup repair. Details on that procedure can be found in the KB linked below if needed.
If you're not sure about the version of Windows 10 that was previously on the machine it might be best to remove all partitions during the windows setup and having it build a completely new layout.
www.dell.com/.../dell-data-protection-encryption-dell-encryption-protected-devices-fail-to-boot-with-operating-system-loader-failed-signature-verification
Best Regards,
alex_kravcenko
1 Message
0
September 25th, 2017 10:00
Hi Steve,
Have you ever tried disabling Hyper-V in Windows 10 with DDPE 8.12.0.26 applied to a system?
Dell-StephenO
2 Intern
•
158 Posts
0
September 27th, 2017 15:00
Hey Alex,
I have not. What are you seeing? It's possible the machine might need a SDE recovery after that role is removed because of how it treats the OS when the role is installed.
www.dell.com/.../how-to-perform-a-sde-recovery-for-dell-data-protection-encryption-dell-encryption-or-credant-managed-endpoint
Let me know what you're seeing if the SDE recovery doesn't work and I can provide some better info.
Best Regards,