This article describes an issue in which BitLocker can't encrypt the drive and the service crashes in Windows 7 Service Pack 1 (SP1) or Windows Server 2008 R2 SP1. An update is available to fix this issue. Before you install this update, see the Prerequisites section.
The BitLocker service crashes and you can't turn on BitLocker on a computer if the following conditions are true:
- The computer is domain-joined.
- You have the Federal Information Processing Standard (FIPS) mode enabled.
- You have installed update 2990184 on the computer.
For more information, see A FIPS-compliant recovery password cannot be saved to AD DS for BitLocker in Windows 7 or Windows Server 2008 R2 (2990184).
- After you install update 3133977 on a Windows 7 x64-based system that includes an ASUS-based main board, the system does not start, and it generates a Secure Boot error on the ASUS BIOS screen. This problem occurs because ASUS allowed the main board to enable the Secure Boot process even though Windows 7 does not support this feature.
To resolve this problem, go to the following ASUS support website to learn how to disable Secure Boot for Windows 7:
Note The Secure Boot feature is supported in Windows 10. To learn more about the security advantages of this feature and about the upgrade path from Windows 7 to Windows 10, go to the following Windows website:
Important If you install a language pack after you install this update, you must reinstall this update. Therefore, we recommend that you install any language packs that you need before you install this update. For more information, see Add language packs to Windows.
Method 1: Windows UpdateThis update is provided as a Recommended update on Windows Update. For more information on how to run Windows Update, see How to get an update through Windows Update.
Method 2: Microsoft Download CenterThe following files are available for download from the Microsoft Download Center.
For more information about how to download Microsoft support files, select the following article number to view the article in the Microsoft Knowledge Base:
|All supported x86-based versions of Windows 7||Download the package now.|
|All supported x64-based versions of Windows 7||Download the package now.|
|All supported x64-based versions of Windows Server 2008 R2||Download the package now.|
|All supported IA-based versions of Windows Server 2008 R2||Download the package now.|
119591 How to obtain Microsoft support files from online servicesMicrosoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
Service Pack 1 for Windows 7 or Windows Server 2008 R2.
Registry informationTo apply this update, you don't have to make any changes to the registry.
Restart requirementThis update will require the system to restart two times in order to complete the installation of the update.
Update replacement informationThis update doesn't replace a previously released update.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Article ID: 3133977 - Last Review: Apr 23, 2017 - Revision: 4
Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Datacenter, Windows Server 2008 R2 Standard, Windows Server 2008 R2 Enterprise, Windows Server 2008 R2 Foundation, Windows Server 2008 R2 for Itanium-Based Systems, Windows 7 Service Pack 1, Windows 7 Ultimate, Windows 7 Enterprise, Windows 7 Professional, Windows 7 Home Premium, Windows 7 Home Basic, Windows 7 Starter