BitLocker Encryption and Decryption

Applies To: Windows Server 2008 R2

Whenever the operating system or an application attempts to read from or write to a BitLocker-protected volume, the BitLocker filter driver must decrypt or encrypt data in real time, sector by sector. The filter driver writes event log information when it encounters problems, even if the problem is corrected with an automatic retry of the operation.

Events

Event ID Source Message

24610

Microsoft-Windows-BitLocker-Driver

Metadata commit: Not all copies of metadata on volume %2 could be written. If failures continue, decrypt volume.

24611

Microsoft-Windows-BitLocker-Driver

Metadata commit: No copies of metadata on volume %2 could be written. If failures continue, decrypt volume.

24612

Microsoft-Windows-BitLocker-Driver

Metadata commit: Metadata update could not be flushed.

24613

Microsoft-Windows-BitLocker-Driver

Metadata commit: An attempt to verify metadata update on volume %2 failed at read. If failures continue, decrypt volume.

24614

Microsoft-Windows-BitLocker-Driver

Metadata commit: Update verification of metadata on volume %2 failed. If failures continue, decrypt volume.

24615

Microsoft-Windows-BitLocker-Driver

Metadata initial read: Primary metadata record on volume %2 could not be found. Volume needs recovery.

24616

Microsoft-Windows-BitLocker-Driver

Metadata initial read: Failover metadata record on volume %2 could not be found. Volume needs recovery.

24617

Microsoft-Windows-BitLocker-Driver

Metadata initial read: Failover metadata record on volume %2 used. If failures continue, decrypt volume.

24618

Microsoft-Windows-BitLocker-Driver

Metadata check: Metadata record on volume %2 could not be read and has been marked for rebuild. If failures continue, decrypt volume.

24619

Microsoft-Windows-BitLocker-Driver

Metadata rebuild: An attempt build a new set of metadata on %2 failed at commit and may appear as disk corruption. If failures continue, decrypt volume.

24622

Microsoft-Windows-BitLocker-Driver

BIOS/TCG Memory Overwrite Control: Error finding TPM driver.

24623

Microsoft-Windows-BitLocker-Driver

BIOS/TCG Memory Overwrite Control: Error registering TPM device interface.

24624

Microsoft-Windows-BitLocker-Driver

BIOS/TCG Memory Overwrite Control: Error changing value %2.

BitLocker Filter Driver

Core Security