Archiv der Kategorie: hardware

Allgemein, computer security, hardware, software

Bitlocker: „Die Anzahl der zulässigen Versuche ist beschränkt“

Vor einiger Zeit bin ich auf diesen Fehler bei der Eingabe der Pre-Boot-Authentifizierung eines Laptops gestoßen: „Die Anzahl der zulässigen Versuche ist beschränkt“. Nur der Wiederherstellungsschlüssel für die Bitlocker-Laufwerksverschlüsselung half weiter.

Nach weiteren Recherchen im Netz bin ich auf diese Seite gestoßen: https://technet.microsoft.com/de-de/library/dd851452(v=ws.11).aspx

Bei „Understanding TPM Protection Mechanism“ schreibt Microsoft, dass „… Some TPM chips may not store failed attempts over time. Other TPM chips may store every failed attempt indefinitely…“

Es hängt also von den TPM-Modulen ab, die sich die fehlerhaften Anmeldeversuche merken, oder eben nicht. Hier: Fujitsu Lifebook E-Klasse aus ca. 2016, TPM-Hersteller IFX, Herstellerversion 5.51.2098.2, Spezifikation 2.0.

Nicht glaubhaft verifizierte Aussagen im Netz sagten, dass 32 fehlerhafte Anmeldeversuche über die gesamte Lebensdauer obige Meldung erscheinen lassen. Dabei habe ich die Platte entschlüsselt, verschlüsselt, mittlerweile das aktuelle Halbjahresupdate installiert (21H2)… es half nichts: nach einen oder zwei fehlerfreien Anmeldungen der bereits neu verschlüsselten SSD-Platte: obige Meldung.

Microsoft schreibt weiter in diesem Artikel: bitte TPM zurücksetzen.

Achtung: Sichern Sie alle Daten auf dem betroffenen Laufwerk vorab; ich übernehme keine Haftung für entstandene Schäden.

Also los, Start von tmp.msc, dann rechts bei „Aktionen“ TMP löschen; es wird ein Neustart durchgeführt. TPM meldete sich mit einem Wizzard in der Pre-Boot-Phase: „PHYSICAL PRESENCE SCREEN. TPM configuration change was requested to State: Clear. WARNING!!! Clearing erases information stored on the TPM. You will lose all created keys and access to data encrypted by these keys.“ Wizzard bietet YES oder NO an. Ich mache dann YES. Es wird ein nochmaligr Neustart durchgeführt und erstmalig Windows ohne weiteres Zutun angemeldet. Ich unternehme einen nochmaligen Neustart; die Eingabemaske erscheint wieder wie gewphnt.

TPM speichert für die Verschlüsselung mit Bitlocker keine relevanten Daten für die Entschlüsselung. TPM verwirbelt vielmehr mit Algorithmen die zu verschlüsselnden Daten weiter.

Mehrere bewusste Falscheingaben in der Pre-Boot-Phase und diverse Neustarts konnten den Fehler nicht mehr reproduzieren. Bisher hat der Reset des Zählers funktioniert.

Allgemein, hardware, software

installing raspberry: kernel panic 179,2

I just copied a image file of raspbian buster lite to a micro sd card. I used the image program Win32DiskImages under windows 10 64Bit for this job. Not the first time i go on with this stuff, i removed the sd card caddy with the micro sd card from the card reader and put it to the raspberry4. I got following error:

Kernel panic – not syncing: VFS: Unable to mount the root fs on unknown-block (179,2)

No matter with how many Cards you will try this, you could find similar results in the web.(https://www.raspberrypi.org/forums/viewtopic.php?t=12245)

At the end: after writing the image,  removed the card at first via windows function: remove card with icon you can find lower right near the watch/datetime.


hardware, software, windows 10

Windows 10 on a 8 years old lifebook? yes, it works.

View days ago, a mate gave me a laptop (Fujitsu Lifebook E736) with a windows 7 pro and asked me to remove a malicious program, his virus scanner was the opinion of a infected system. Ok. Done. That was not the matter.

We discussed the situation after February 2020 – windows 7 will not be longer supported by microsoft.

The notebook is (as i mentioned above) a Fujitsu Lifebook E736 with an i3-Processor and 4 GB RAM.  The first look was at Fujitsus Website for drivers. Hm. There just Windows 7 ones for download. So installing and configuring windows 10 on this hardware would be an intressting small project. If all goes right and setup will recognize the hardware, the owner could get a machine for surfing, doing office and multimedia and the laptop goes further as a usefull tool. Lets start.

I have changed the hdd with a Sandisk 670 EVO SSD with 512 GB. Then i downloaded a windows 10 64bit Image from microsoft and installed it via a DVD onto the ssd. During the installation, i choosed the windows 10 home verison (i did not mentioned, how simple was the activation later). The installation was fine, so i downloaded the media creators tool and pushed the current version 1909 on it. Fine. After this i checked the driver via the computer management, and i – astonnished – recognized, that nearly all drivers were found by microsoft native setup installations. Except the card reader is not working.

Windows 10 on a 8 years old laptop - see the desktop
Windows 10 on a 8 years old laptop – see the desktop

The start menue is working very fast, starting the computer management via the start menue takes about 2 seconds. The memory wth a size of 4 GB is about at 50%.

But hows about the actvation? On the lower side of the machine, there is a windows 7 license key sticker. I choosed the activation app of windows, typed in the key and two intresting things happened: first was that microsoft activated with the key the windows 10 and second, it moved from windows 10 home to windows 10 pro.

This action took just view hours on time and the result is very welcome. Now we have a sensfull job for a aged machine with a new windows, for years until maybe the hardware will be unrepairable damaged.

The disadvantage is maybe the battery-power. Batteries of older devices mostly giving power for just few minutes. In this case, we have a such Battery: Plugging off the power cord and few minutes later, the laptop is powered off.

But in the same case, there is no matter. This device works all the time on a desk, power, mouse and keyboard and a external monitor plugged in.

My advice: 1-take a try and install a windows 10 on old machines. Important is the update setup to a current version like 1909 or newer. It might be possibel that on newer devices, you will get a better driver support. So you will have a reliable system for coming jobs like browsing, office, small/medium multimedia, programming, and so on. And you are doing good because you releave the environment. 2-the lifebook E-series is like for office or pro use. If you keep off the next time again and spend a little much more for your device, the change to work longer without problems is better because office and pro devices are builded with a higher quality standard and the driver support is more sustainable.