Problem installing KB935509

Discussion in 'Windows Vista Security' started by George P, Jan 23, 2008.

  1. George P

    George P Guest

    (KB935509 - A software update is available for versions of Windows Vista that
    include the Windows BitLocker Drive Encryption feature)

    I am having a problems installing the KB935509 update on a Vista Enterprise
    system. Windows Updater is always unsuccessful - I have tried many times. I
    have even downloaded KB935509 & installed manually -it says successful but if
    I look under Control Panel/Installed Updates it is not listed there and
    Windows Updater keeps coming back with a request to install.

    This is very frustrating - I keep going around in circles. I understanding
    that I will need this update to load Vista SP1 when available. Short of doing
    a clean install of Vista is there anything I can do? Thanks in advance.
    George.
     
    George P, Jan 23, 2008
    #1
    1. Advertisements

  2. George P

    Smorup Guest

    I have the exact same problem.. Also KB932596 will not install... I have
    reinstalled Vista from scrats but that didn't help.
    I'm running Vista Enterprise x64
     
    Smorup, Jan 28, 2008
    #2
    1. Advertisements

  3. George P

    manimbored Guest

    manimbored, Jan 28, 2008
    #3
  4. George P

    Smorup Guest

    I tried running "SFC /scannow" but it failed at 99%.. Then I ran
    "chkdsk /f /r" and then "SFC /scannow" again... same result

    The errors in sfcdetails are

    2008-01-28 23:24:16, Info CSI 000000f3 [SR] Canno
    repair member file [l:44{22}]"GlobalInstallOrder.xml" o
    Microsoft-Windows-ServicingStack, Version = 6.0.6000.16386, pA
    PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope =
    nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral
    TypeName neutral, PublicKey neutral in the store, hash mismatc

    2008-01-28 23:24:17, Info CSI 000000f5 [SR] Canno
    repair member file [l:44{22}]"GlobalInstallOrder.xml" o
    Microsoft-Windows-ServicingStack, Version = 6.0.6000.16386, pA
    PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope =
    nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type neutral
    TypeName neutral, PublicKey neutral in the store, hash mismatc

    It's saying that my processor architecture is AMD64 but it is a Inte
    DualCore processor I have..
    Device Manager says - Intel(R) Core(TM)2 CPU T7200 @ 2.00GH

    Any ideas
     
    Smorup, Jan 29, 2008
    #4
  5. George P

    manimbored Guest

    AMD64 just means 64 bit...

    I've only seen 'one other person'
    (http://www.vistaheads.com/forums/mi...ndows-update-error-80070017-a.html#post632255)
    with your issue. They fixed it by browsing to the Windows directory,
    copying the file from the Vista CD, and allowing escalation with the
    subsequent UAC prompt (so you had permission to move the file.

    Does 'this link'
    (http://support.microsoft.com/kb/942...refox-a&rls=org.mozilla:en-US:official&hs=la0)
    help if the above doesn't (does it match your issue?)?
     
    manimbored, Jan 29, 2008
    #5
  6. George P

    Barret7sc Guest

    I was having this same problem on Vista Ultimate 32bit

    There is a fix, but I don't like it

    You need to run the BitLocker Drive Prep tool, it is located unde
    Start > All Programs > Accessories > BitLocker > BitLocker Drive Pre
    too

    This will shrink your boot drive by 1.5gb and create a new partitio
    where it will put the unencrypted boot files

    You have to do this to get the update to install even if you do no
    plan to use BitLocke

    Also, you can't use BitLocker if your mobo does not have a TPM. Min
    doesn't

    But, at any rate, it did install the update for me, finally
     
    Barret7sc, Feb 2, 2008
    #6
  7. George P

    Seth Guest


    TPM makes using BitLocker easier, but is not a requirement. BitLocker does
    work without TPM. You can use BitLocker without TPM.
     
    Seth, Feb 2, 2008
    #7
  8. George P

    Barret7sc Guest

    No, no, you CAN NOT enable BitLocker without a TPM.

    Screenshot or it didn't happen you say?

    Fine. ;)

    [image: http://www.sevensoupcans.com/tpm.png]
     
    Barret7sc, Feb 3, 2008
    #8
  9. Yes, you can. You can use a flash drive to store the key.

    --
    Dustin Harper

    http://www.VistaRIP.com | Vista Resource & Information Page


     
    Dustin Harper, Feb 3, 2008
    #9
  10. And a link:
    http://technet2.microsoft.com/Windo...ce29-4f09-89ef-65bce923cdb51033.mspx?mfr=true

    Quote: "*A TPM is not required for BitLocker; however, only a computer with
    a TPM can provide the additional security of pre-startup system integrity
    verification."

    --
    Dustin Harper

    http://www.VistaRIP.com | Vista Resource & Information Page


     
    Dustin Harper, Feb 3, 2008
    #10
  11. George P

    Paul Adare Guest

    Sorry, but you're wrong here. You simply need to use gpedit.msc to enable
    the use of a USB device to store the key.
     
    Paul Adare, Feb 3, 2008
    #11
  12. George P

    Seth Guest



    Maybe YOU can't enable BitLocker without TPM, but for the rest of us it
    works.

    From page...
    http://technet2.microsoft.com/Windo...a7f5-4c97-ab41-2bcc61a58a701033.mspx?mfr=true



    Can I use BitLocker on a computer without a TPM version 1.2?
    Yes, you can enable BitLocker on a computer without a TPM version 1.2,
    provided that the BIOS has the ability to read from a USB flash drive in the
    boot environment. This is because BitLocker will not unlock the protected
    volume until BitLocker's own volume master key is first released by either
    the computer's TPM or by a USB flash drive containing the BitLocker startup
    key for that computer. However, computers without TPMs will not be able to
    take advantage of the system integrity verification that BitLocker can also
    provide.

    To help determine whether a computer can read from a USB device during the
    boot process, use the BitLocker System Check as part of the BitLocker setup
    process. This system check performs tests to confirm that the computer can
    properly read from the USB devices at the appropriate time and that the
    computer meets other BitLocker requirements.

    To enable BitLocker on a computer without a TPM, use Group Policy to enable
    the advanced BitLocker user interface. With the advanced options enabled,
    the non-TPM settings appear in the BitLocker setup wizard. For instructions
    about using Group Policy to enable the advanced user options, see
    http://go.microsoft.com/fwlink/?LinkId=83223.
     
    Seth, Feb 3, 2008
    #12
  13. George P

    Barret7sc Guest

    I appreciate the feedback.

    I just assumed that the dialog was correct, thats all. Its nice to see
    that there are other options to enable the encryption.
     
    Barret7sc, Feb 3, 2008
    #13
  14. 2 pre-reqs for a 1 GB service pack and then there is a problem getting
    it installed, due to the security application they have in place. This
    reminds me of updating windows 95 where updates wouldn't apply because
    they required a restart. You didn't know they failed until after the
    fact, then you had to install them in a certain order. This isn't going
    to get people to adopt Vista, it will force them to stick with what
    works. Please work on getting the OS to help me be more productive,
    rather than spend my day going through hoops to resolve things that were
    not a problem in the prior version of the OS. I know it's complicated
    to balance security and functionality, but keep plugging away at it. I
    know it can be done. Seems there are too many tweaks to work around
    issues, I.E. TPM and Bit Locker.
     
    Offroad Deployment Chimp, Feb 3, 2008
    #14
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.