Dell Encryption Personal Unable to Configure for Encryption

Summary: After installing Dell Encryption (formerly Dell Data Protection | Encryption), and walking through the setup wizard, you receive a message "Unable to Configure for Encryption."

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.

Symptoms

Affected Products:

  • Dell Encryption Personal
  • Dell Data Protection | Personal Edition

Dell Data Protection Setup Wizard

Figure 1: (English Only) Dell Data Protection Setup Wizard

To verify that the cause of the issue, open the LMS output.log in C:\Program Files\Dell\Dell Data Protect\Encryption\LMS\Logs or LogBundleName\ProgramFiles-DDP\Encryption\LMS\Logs from a Diagnostic Info bundle. Below is a sample error:

20xx-xx-x xx:xx:xx,xxx ERROR CONTAINER [4] - Credant.Common.Security.SecurityException: Error trying to protect databaseSettings ---> System.Configuration.ConfigurationErrorsException: Failed to decrypt using provider 'LmsRsaProvider'. Error message from the provider: The RSA key container could not be opened. (C:\Program Files\Dell\Dell Data Protection\Encryption\LMS\Database.config line 2) ---> System.Configuration.ConfigurationErrorsException: The RSA key container could not be opened.

Cause

Not Applicable

Resolution

To resolve this issue:

  1. Uninstall Dell Encryption Personal (formerly Dell Data Protection | Personal Edition).
  2. Once Dell Encryption is removed, and you have verified all files are decrypted.
    • Delete the Encryption folder in C:\Program Files\Dell\Dell Data Protection.
    • Starting with v8.15 and later you must delete the following folder: c:\programdata\dell\dell data protection\encryption.

Dell Encryption Folder in Windows Explorer

Figure 2: (English Only) Dell Encryption Folder in Windows Explorer

  1. Remove the credsecagent$admin local account from the computer.

Computer Management

Figure 3: (English Only) Computer Management

  1. Reinstall Dell Encryption.


Windows Home Editions does not contain Local Users and Groups within the Computer Management snap-in. Validating and removing the credsecagent$admin account can be done using Powershell as an administrator.

Within an administrative Powershell session:

Check for local users:

Get-WmiObject -Class Win32_UserAccount -Filter "LocalAccount='True'"

If the credsecagent$admin account is found, they can be removed by running the following command within the same administrative Powershell session:

net user ‘credsecagent$admin’ /DELETE

NOTE: The single quotes are needed so the $ is not seen as an operator.
 

To contact support, see Dell knowledge base article Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.

Affected Products

Dell Encryption
Article Properties
Article Number: 000124655
Article Type: Solution
Last Modified: 28 Mar 2023
Version:  7
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.