无法按预期配置bitlocker。例外：2147942487加密失败 [英] Failed to configure bitlocker as expected. Exception: Encrypt failed with 2147942487

问题描述

当我尝试在Windows 10 VM上启用Azure磁盘加密时出现以下异常。

我正在按照这里的指示：  https://docs.microsoft.com/en-us/的powershell /模块/ azurerm.compute /设定azurermvmdiskencryptionextension？视图= azurermps-6.13.0 的

无法BitLocker的配置为预期。例外：加密失败，错误2147942487，InnerException :,堆栈跟踪：   在Microsoft.Cis.Security.BitLocker.BitlockerIaasVMExtension.BitlockerWmi.Win32EncryptableVolumeWrap.Encrypt（）in 
                       X：\bt\1001052\repo\src\BitLocker\BitlockerIaasVMExtension\BitlockerWMI\Win32EncryptableVolumeWrap.cs：行451

     &NBSP ;                        &NBSP ;在Microsoft.Cis.Security.BitLocker.BitlockerIaasVMExtension.BitlockerOperations.StartEncryptionOnVolume（EncryptableVolume
体积）中的X：\bt\1001052\repo\src\BitLocker\BitlockerIaasVMExtension\BitlockerOperations.cs：线867

                    &NBSP ;          在Microsoft.Cis.Security.BitLocker.BitlockerIaasVMExtension.BitlockerExtension.EnableEncryption（）
在X：\bt\1001052\repo\src\BitLocker\BitlockerIaasVMExtension\BitlockerExtension.cs：线1272 <登记/>
&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP ;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;在Microsoft.Cis.Security.BitLocker.BitlockerIaasVMExtension.BitlockerExtension.HandleEncryptionOperations（）
在X：\bt\1001052\repo\src\BitLocker\BitlockerIaasVMExtension\BitlockerExtension.cs：线1505 <登记/>
&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP ;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;&NBSP;在Microsoft.Cis.Security.BitLocker.BitlockerIaasVMExtension.BitlockerExtension.OnEnable（）
在X：\bt\1001052\repo\src\BitLocker\BitlockerIaasVMExtension\BitlockerExtension.cs：线1595

解决方案

您可以共享用于加密Windows VM的完整Power Shell脚本吗？ / p>

您正在尝试使用  加密方案 部分？

在加密VM之前，您是否遵循了磁盘加密先决条件？如果没有，我建议你检查

此处。

您还可以尝试安装  最新的Az PowerShell模块，如上所述  这里  和
运行以下PowerShell脚本来加密Windows虚拟机。

 Login-AzAccount 
 Select-AzSubscription  - 订阅"**********************"

rgName ="您的资源组名称"

location =" location name"

Register-AzResourceProvider -ProviderNamespace" Microsoft.KeyVault"
Get-AzResourceGroup -Location

I get the following exception when I try to enable Azure Disk encryption on a Windows 10 VM.

I'm following direction from here: https://docs.microsoft.com/en-us/powershell/module/azurerm.compute/set-azurermvmdiskencryptionextension?view=azurermps-6.13.0

Failed to configure bitlocker as expected. Exception: Encrypt failed with 2147942487, InnerException: , stack trace:    at Microsoft.Cis.Security.BitLocker.BitlockerIaasVMExtension.BitlockerWmi.Win32EncryptableVolumeWrap.Encrypt() in                          X:\bt\1001052\repo\src\BitLocker\BitlockerIaasVMExtension\BitlockerWMI\Win32EncryptableVolumeWrap.cs:line 451
                                at Microsoft.Cis.Security.BitLocker.BitlockerIaasVMExtension.BitlockerOperations.StartEncryptionOnVolume(EncryptableVolume vol) in X:\bt\1001052\repo\src\BitLocker\BitlockerIaasVMExtension\BitlockerOperations.cs:line 867
                                at Microsoft.Cis.Security.BitLocker.BitlockerIaasVMExtension.BitlockerExtension.EnableEncryption() in X:\bt\1001052\repo\src\BitLocker\BitlockerIaasVMExtension\BitlockerExtension.cs:line 1272
                                at Microsoft.Cis.Security.BitLocker.BitlockerIaasVMExtension.BitlockerExtension.HandleEncryptionOperations() in X:\bt\1001052\repo\src\BitLocker\BitlockerIaasVMExtension\BitlockerExtension.cs:line 1505
                                at Microsoft.Cis.Security.BitLocker.BitlockerIaasVMExtension.BitlockerExtension.OnEnable() in X:\bt\1001052\repo\src\BitLocker\BitlockerIaasVMExtension\BitlockerExtension.cs:line 1595

解决方案

Can you share the complete Power Shell script which you have used to encrypt the windows VM?

Which encryption scenario you are trying from the scenarios listed in the Encryption scenarios section?

Did you followed the disk encryption prerequisites before encrypting the VM? If not, I would recommend you to check here.

You can also try installing  the latest Az PowerShell module as described here and run the below PowerShell script to encrypt the windows virtual machine.

Login-AzAccount
Select-AzSubscription -Subscription "**********************"

rgName = "your resource group name"

location = "location name" Register-AzResourceProvider -ProviderNamespace "Microsoft.KeyVault" Get-AzResourceGroup -Location

这篇关于无法按预期配置bitlocker。例外：2147942487加密失败的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！