Skip to main content

Questions about MVP Win PE Builder

Thread needs solution

Tried to post this on the MVP Win PE Builder post but could not, so:

 

I'd like to host my local backups on a bitlockered volume, and be able to do bare-metal recovery from said volume.  My operating disks are NOT bitlocked (they're SEDs)--only the backup volume will be.

Questions:

1.  Will this tool do what I want?

2. Will it work with 2016 (how do I find out if my build is latest enough to work with this tool)?  If the script runs without errors does that mean my media will work as well?

3. Do I need to install Windows ADK to integrate BL support?

4. Will it work with TI 2021?

Thanks for all the great work on this.

1 Users found this helpful

Larry, this is a situation where using a more recent version of ATI than 2016 is recommended, i.e. such as ATI 2021.

I have done recent testing of ATI 2021 with Bitlocker for another user in the forums and found that BL support is automatically included in the 'Simple' version of the ATI 2021 Rescue Media without needing to use the MVP Custom PE Builder script to include it.

The following is a copy of the results of my testing for the above:

If you create the 'Simple' version of the ATI 2021 rescue media, and do this on Windows 10 Pro which has BitLocker support, then this is included in the rescue media but there are some steps that are needed in order to access a BitLocker encrypted drive in the rescue environment.

When you boot into the rescue environment, you will see a black Command prompt window along with the main ATI 2021 application window.  You need to close the ATI 2021 window in order to have access to the command prompt in the black window.

Now, you can use the BitLocker commands to identify and unlock your encrypted drive before relaunching the ATI 2021 application again using "X:\Program Files\Acronis\TrueImageHome\trueimage_starter.exe"

See the following data captured from my own system booted from the ATI 2021 Simple rescue media with an encrypted drive connected.

X:\windows\system32>wpeinit

X:\windows\system32>"X:\Program Files\Acronis\TrueImageHome\trueimage_starter.exe"
Terminate batch job (Y/N)? n

X:\windows\system32>manage-bde -status

BitLocker Drive Encryption: Configuration Tool version 10.0.19041
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

Disk volumes that can be protected with
BitLocker Drive Encryption:
Volume C: [Windows]
[Data Volume]

    Size:                 200.83 GB
    BitLocker Version:    None
    Conversion Status:    Fully Decrypted
    Percentage Encrypted: 0.0%
    Encryption Method:    None
    Protection Status:    Protection Off
    Lock Status:          Unlocked
    Identification Field: None
    Automatic Unlock:     Disabled
    Key Protectors:       None Found

Volume D: [SSD-Data]
[Data Volume]

    Size:                 263.29 GB
    BitLocker Version:    None
    Conversion Status:    Fully Decrypted
    Percentage Encrypted: 0.0%
    Encryption Method:    None
    Protection Status:    Protection Off
    Lock Status:          Unlocked
    Identification Field: None
    Automatic Unlock:     Disabled
    Key Protectors:       None Found

Volume L: [Label Unknown]

[Data Volume]

    Size:                 Unknown GB
    BitLocker Version:    2.0

    Conversion Status:    Unknown
    Percentage Encrypted: Unknown%
    Encryption Method:    AES 128
    Protection Status:    Unknown
    Lock Status:          Locked
    Identification Field: Unknown
    Automatic Unlock:     Disabled
    Key Protectors:
        Password
        Numerical Password

Volume H: [Data]
[Data Volume]

    Size:                 114.10 GB
    BitLocker Version:    None
    Conversion Status:    Fully Decrypted
    Percentage Encrypted: 0.0%
    Encryption Method:    None
    Protection Status:    Protection Off
    Lock Status:          Unlocked
    Identification Field: None
    Automatic Unlock:     Disabled
    Key Protectors:       None Found

X:\windows\system32>manage-bde -unlock L: -password
BitLocker Drive Encryption: Configuration Tool version 10.0.19041
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

Enter the password to unlock this volume:
The password successfully unlocked volume L:.

X:\windows\system32>dir L:
 Volume in drive L is Seagate250gb
 Volume Serial Number is 1052-D550

 Directory of L:\

07/11/2020  00:08    46,379,683,840 MyBackup(1).tibx
05/11/2020  00:51    45,030,981,632 MyBackup.tibx
               2 File(s) 91,410,665,472 bytes
               0 Dir(s)  158,538,076,160 bytes free

X:\windows\system32>"X:\Program Files\Acronis\TrueImageHome\trueimage_starter.exe"

X:\windows\system32>

The MVP Custom PE Builder script can be used to create more flexible rescue media that has additional tools but again I would recommend using this with such as ATI 2021 due to known issues in earlier ATI versions rescue media which didn't correct recognise encrypted drives as being unlocked after doing so in the WinPE offline environment.