Blue Screen error WINLOGON_FATAL_ERROR (0xc000021a) when upgrading to Dell Data Protection Encryption 8.x

Blue Screen error WINLOGON_FATAL_ERROR (0xc000021a) when upgrading to Dell Data Protection Encryption 8.x


Blue Screen encountered when upgrading to Dell Data Protection | Encryption 8.x from builds prior to Dell Data Protection | Encryption 7.2.3.4397 and CMG 7.3.0.4467.


Affected Products:

Dell Data Protection | Encryption


Older versions of the Shield will encrypt the c:\windows\system32\csrss.exe file using the default SDE policy. Newer versions of the Shield have a hard-coded exclusion for this file to prevent possible system deadlocks. The Dell Data Protection | Encryption 8.x driver encounters system deadlocks during boot while attempting to see if this file was encrypted. It is hard-coded to return that the file was not encrypted. This is a problem when upgrading from older versions that have the file encrypted because the operating system will try to execute the cipher text as an executable. This is a required component to the boot process so its failure triggers the Blue Screen.



To resolve the issue perform the following steps:

  1. Add an exclusion policy for:

-^3@%ENV:SYSTEMROOT%\SYSTEM32\csrss.exe;exe

  1. Use WSScan to verify this file is no longer encrypted
  2. Upgrade to Dell Data Protection | Encryption 8.x

If you are upgrading from a version older than CMG v7.3.0 or Dell Data Protection | Encryption v7.2.4.5331, you will need to follow these steps:

  1. Add an exclusion policy for:

-^3@%ENV:SYSTEMROOT%\SYSTEM32\csrss.exe;exe

  1. Upgrade to CMG 7.3.0.5616 or Dell Data Protection | Encryption 7.2.4.5331 based on the version/brand currently installed.
  2. Run WSProbe to remove the encryption from this file.
  3. Use WSScan to verify this file is no longer encrypted.
  4. Upgrade to Dell Data Protection | Encryption 8.x

For support, US-based customers may contact Dell Data Security ProSupport at 877.459.7304, Option 1, Ext. 4310039, or via the Chat Portal. To contact support outside the US, reference ProSupport’s International Contact Numbers. For additional insights and resources, visit the Dell Security Community Forum.



Article ID: SLN285941

Last Date Modified: 09/14/2019 04:39 AM


Rate this article

Accurate
Useful
Easy to understand
Was this article helpful?
Yes No
Send us feedback
Comments cannot contain these special characters: <>()\
Sorry, our feedback system is currently down. Please try again later.

Thank you for your feedback.