1 2 Previous Next 12 Replies Latest reply on May 29, 2014 12:45 PM by ittech

    Early activation error: Not enough entropy available

    ittech

      I have a client getting this error with DE 7.1:

       

      Early activation error: [0xCF060005] [0xCC060005] Not enough entropy available

       

      I haven't found anything about this specifically and I think it may relate to the Pre-Boot System Check, but I'm not sure.

       

      Here's more of the log:

       

      2014-05-13 17:14:47,563 INFO    MfeEpeCoreEncryptionPlugin           --- Activation Begins ---

      2014-05-13 17:14:47,563 INFO    StatusService                        Activation has started

      2014-05-13 17:14:47,579 INFO    StatusService                        Searching available Encryption Providers

      2014-05-13 17:14:47,579 INFO    MfeEpeCoreEncryptionPlugin           Size of provider order list in policy is 2

      2014-05-13 17:14:47,579 INFO    MfeEpeCoreEncryptionPlugin           Service with UUID 70e77e64-14e4-467d-8d22-775dc78d7c3b has state: Ready

      2014-05-13 17:14:47,579 INFO    MfeEpeCoreEncryptionPlugin           Found a preferred provider with UUID 70e77e64-14e4-467d-8d22-775dc78d7c3b with state: Ready

      2014-05-13 17:14:47,579 INFO    MfeEpeCoreEncryptionPlugin           Service with UUID 6477FB57-DCF1-418E-9948-9F32C57B0FA4 has state: Unsupported

      2014-05-13 17:14:47,579 INFO    MfeEpeCoreEncryptionPlugin           Final preferred provider with UUID 70e77e64-14e4-467d-8d22-775dc78d7c3b is selected with state: Ready

      2014-05-13 17:14:47,579 INFO    StatusService                        Located the Encryption Provider to use

      2014-05-13 17:14:47,594 INFO    StatusService                        Detecting incompatible products

      2014-05-13 17:14:47,672 INFO    StatusService                        No incompatible products found

      2014-05-13 17:14:47,719 INFO    StatusService                        Creating Preboot File System (PBFS)

      2014-05-13 17:14:47,719 INFO    PcSystem                             Beginning activation. Current status is inactive.

      2014-05-13 17:16:49,408 INFO    PcSystem                             Abandoning activation

      2014-05-13 17:16:49,408 ERROR   PcSystem                             Early activation error: [0xCF060005] [0xCC060005] Not enough entropy available

      2014-05-13 17:16:49,408 ERROR   StatusService                        Preboot File System (PBFS) creation failed

      2014-05-13 17:16:49,423 WARNING MfeEpePcEncryptionProviderPlugin     ..\..\..\Src\EpeGenActivationHandler.cpp: EPE_gen_activation_handler::send_activate_exception: 932: [0xCF060005] [0xCC060005] Not enough entropy available

      2014-05-13 17:16:49,423 WARNING MfeEpeCoreEncryptionPlugin           receive_from_service_first_message_of_type(MfeEpeEncryptionServiceClient, class ns1__ESActivateEncryptionAck) wrong message received:

      <?xml version="1.0" encoding="UTF-8"?><MfeEpeMessageList xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/"xmlns:SOAP-ENC="http://schemas.xmlsoap .org/soap/encoding/"xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"xmlns:x sd="http://www.w3.org/2001/XMLSchema"xmlns:ns1=""xsi:type="ns1:MfeEpeMessageList "><element xsi:type="ns1:ESActivateEncryptionExc">

        <sendTo xsi:type="ns1:MfeEpeAddress" serviceUUID="5145540F-1BA8-4F52-895D-617839C2869E" serviceName="MfeEpeEncryptionServiceClient"></sendTo>

        <from xsi:type="ns1:MfeEpeAddress" serviceUUID="70e77e64-14e4-467d-8d22-775dc78d7c3b" serviceName="MfeEpeEncryptionService"></from>

        <errorId>-821690363</errorId>

        <message>[0xCF060005] [0xCC060005] Not enough entropy available</message>

      </element></MfeEpeMessageList>

      2014-05-13 17:16:49,423 ERROR   EpoPlugin                            userHandler: failed to process batched user data response: [0xEF060005] [0xCF060005] [0xCC060005] Not enough entropy available

      2014-05-13 17:16:49,423 INFO    EpoState                             == End of policy enforcement ==

      2014-05-13 17:16:49,423 INFO    PcSystem                             Abandoning activation

      2014-05-13 17:16:49,423 ERROR   StatusService                        Failed to process a batch of user data received

      2014-05-13 17:16:49,423 INFO    StatusService                        Policy enforcement has completed

      2014-05-13 17:16:49,423 ERROR   PcSystem                             Error abandoning activation: [0xEE120002]

      2014-05-13 17:16:49,423 ERROR   MfeEpePcEncryptionProviderPlugin     [0xEE120002]

      2014-05-13 17:16:49,439 INFO    EpoPlugin                            userHandler: handling GetAllUsers response

      2014-05-13 17:16:49,439 INFO    StatusService                        Received data for assigned users

      2014-05-13 17:16:49,439 ERROR   EpoPlugin                            userHandler: failed to process batched user data response: [0xEE000006] No policy store

      2014-05-13 17:16:49,439 ERROR   StatusService                        Failed to process a batch of user data received

      2014-05-13 17:16:49,439 INFO    StatusService                        Policy enforcement has completed

      2014-05-13 17:16:49,439 INFO    EpoState                             == End of policy enforcement ==

       

      Any help is greatly appreciated!

        • 1. Re: Early activation error: Not enough entropy available
          Timmah

          Hi,

           

          Is this in FIPS mode? I would only expect to see this error in FIPS mode, and it's saying there's not enough entropy for cryptographic operations. You could try generating some network traffic on the client, and try activating again.

           

          HTH,

           

          Tim

          1 of 1 people found this helpful
          • 2. Re: Early activation error: Not enough entropy available
            ittech

            Yes, it is in FIPS mode!

             

            How would I generate network traffic if the client is in the field and does the source or destination matter?

            • 3. Re: Early activation error: Not enough entropy available

              doesnt matter - any traffic will work. The problem is the machine is not being used, so it can't meet the minimim entropy requirements the FIPS PNRG requires.

              1 of 1 people found this helpful
              • 4. Re: Early activation error: Not enough entropy available
                ittech

                I see in the admin guide it mentions moving the mouse around. Would that help?

                 

                This is a laptop with an aircard, idk what kind of traffic it would have when in pre-boot. Or is this just at any time?

                • 5. Re: Early activation error: Not enough entropy available

                  It's nothing to do with preboot - yes, moving the mouse, just using the machine will resolve this rather than it sitting idle.

                  1 of 1 people found this helpful
                  • 6. Re: Early activation error: Not enough entropy available
                    ittech

                    Well, I know it gets used due to the nature of the emploee's postion and that network traffic should be going back and forth throughout the day.

                     

                    Could it just be a matter of timing? Like nothing's happening when DE is trying to activate?

                     

                    I've started a constant ping to the PC and forced a wake up call to the agent to see if that would fix it.

                    • 7. Re: Early activation error: Not enough entropy available

                      most likely yes - user was at lunch or something.

                      • 8. Re: Early activation error: Not enough entropy available
                        ittech

                        Still failed:

                         

                             2014-05-13 19:05:56,984 INFO    MfeEpeCoreEncryptionPlugin           --- Activation Begins ---

                             2014-05-13 19:05:56,984 INFO    StatusService                        Activation has started

                             2014-05-13 19:05:56,984 INFO    StatusService                        Searching available Encryption Providers

                             2014-05-13 19:05:56,984 INFO    MfeEpeCoreEncryptionPlugin           Size of provider order list in policy is 2

                             2014-05-13 19:05:56,984 INFO    MfeEpeCoreEncryptionPlugin           Service with UUID 70e77e64-14e4-467d-8d22-775dc78d7c3b has state: Ready

                             2014-05-13 19:05:56,984 INFO    MfeEpeCoreEncryptionPlugin           Found a preferred provider with UUID 70e77e64-14e4-467d-8d22-775dc78d7c3b with state: Ready

                             2014-05-13 19:05:56,984 INFO    MfeEpeCoreEncryptionPlugin           Service with UUID 6477FB57-DCF1-418E-9948-9F32C57B0FA4 has state: Unsupported

                             2014-05-13 19:05:56,984 INFO    MfeEpeCoreEncryptionPlugin           Final preferred provider with UUID 70e77e64-14e4-467d-8d22-775dc78d7c3b is selected with state: Ready

                             2014-05-13 19:05:56,984 INFO    StatusService                        Located the Encryption Provider to use

                             2014-05-13 19:05:56,984 INFO    StatusService                        Detecting incompatible products

                             2014-05-13 19:05:57,109 INFO    StatusService                        No incompatible products found

                             2014-05-13 19:05:57,156 INFO    StatusService                        Creating Preboot File System (PBFS)

                             2014-05-13 19:05:57,156 INFO    PcSystem                             Beginning activation. Current status is inactive.

                             2014-05-13 19:07:58,835 INFO    PcSystem                             Abandoning activation

                             2014-05-13 19:07:58,866 ERROR   PcSystem                             Early activation error: [0xCF060005] [0xCC060005] Not enough entropy available

                             2014-05-13 19:07:58,866 ERROR   StatusService                        Preboot File System (PBFS) creation failed

                         

                        This all happened while the machine was being constantly pinged. Is that not enough, does the activity have to be local?

                        • 9. Re: Early activation error: Not enough entropy available

                          a ping is not generating any traffic - I doubt the OS is even involved.

                          1 2 Previous Next