Compact Flash EWF problem (one partition, removable, secondary master)

[Günter Wirth]

Hi,

I'am not able to activate the EWF on my system. If I call <ewfmgr.exe c:> I
get alwas the error "Failed getting protected volume configuration with
error 1"

I want only one partion and the EWF data in the registry. I did all steps
of:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnxpesp1/html/XPESP1_CF_EWF.asp

My system use a Compact Flash (SAMSUNG CF/ATA 256MB) which is connected to
the Secondary IDE Channel as master. The removable bit is set on the CF.
There is no other CF/HD connected to the system.

I added this to the registry:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ewf\Parameters]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ewf\Parameters\Protect
ed]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ewf\Parameters\Protect
ed\Volume0]
"VolumeID"="{1EA414D1-6760-4625-8CBE-4F9F85A48E15}"
"Type"=dword:00000001
"ArcName"="multi(0)disk(0)rdisk(0)partition(1)"

What means 1EA414D1-6760-4625-8CBE-4F9F85A48E15?
Or do I need another ArcName for the secondary master?

Best Regards,
Günter

 

[KM]

Günter,

ArcName needs to point to disk and partition that will be protected.
Change rdisk(0) to rdisk(1).

KM

Hi,

I'am not able to activate the EWF on my system. If I call <ewfmgr.exe c:> I
get alwas the error "Failed getting protected volume configuration with
error 1"

I want only one partion and the EWF data in the registry. I did all steps
of:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnxpesp1/html/XPESP1_CF_EWF.asp

My system use a Compact Flash (SAMSUNG CF/ATA 256MB) which is connected to
the Secondary IDE Channel as master. The removable bit is set on the CF.
There is no other CF/HD connected to the system.

I added this to the registry:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ewf\Parameters]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ewf\Parameters\Protect

ed]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ewf\Parameters\Protect
ed\Volume0]
"VolumeID"="{1EA414D1-6760-4625-8CBE-4F9F85A48E15}"
"Type"=dword:00000001
"ArcName"="multi(0)disk(0)rdisk(0)partition(1)"

What means 1EA414D1-6760-4625-8CBE-4F9F85A48E15?
Or do I need another ArcName for the secondary master?

Best Regards,
Günter

 

[Günter Wirth]

Hi,

I'm sorry, but that don't solve my problem. I tried rdisk(0)
to rdisk(3) without success.

I check my boot.ini and changed it there too, it works only with rdisk(0).

Any other ideas?

Regards,
Günter

 

[KM]

Günter,

Actually, I mentioned rdisk(1) (not 3).
Anyway, if you are able to use the rdisk(0) arcpath from boot.ini - it is a
good path.

Check if you image includes "PnP(User-mode)" component.
If not, include it and try again.
If so, please post your FBALog.txt file here (as attachment, please) so that
we could check if any errors occured during FBA.

KM

 

[=?ISO-8859-1?Q?Ulf_Jaenicke-R=F6=DFler?=]

Any other ideas?

I believe you must call etprep/delete after the FBA before
copying the files to the CF in order for EWF to use the
Registry for its settings.

Ulf

 

[KM]

Ulf,

"etprep /delete" deletes the EWF configuration partition.
He never had one (he is actually trying to avoid its creation by using the
stateless EWF).

KM

 

[=?ISO-8859-1?Q?Ulf_Jaenicke-R=F6=DFler?=]

"etprep /delete" deletes the EWF configuration partition.

I know

He never had one (he is actually trying to avoid its creation by using the
stateless EWF).

I seem to remember I had a similar problem when I simply copied the image
files from a HD (where the FBA was run) to a CF without etprep/delete.
I thought it might be necessary to transfer or use settings from the
registry instead of the partition... But, of course, I may be wrong.

Greetings,
Ulf

 

[Günter Wirth]

Hi,

I run the FBA on the Compact Flash directly, not on a HD.
I tried to call <etprep /delete>, it says "Deleted EWFpartitions = 0"

I have only one partition on my CF (the removable flag is set)!

Regards,
Günter

 

[KM]

Günter,

This has been expected from the information you provided above. That is why
I said there is no need to run etprep /delete.

Have you tried my suggestions from another email in this thread?

KM

 

[Slobodan Brcin \(eMVP\)]

Hi Günter,

Try avoiding FBA on CF. There is a one sector at the beginning of the disk (let's say sector 50) that is written to with more that
1000 times, so check in your doc how many writes your CF can handle, per block.

Regarding configuring Reg RAM EWF read or use:
http://www.xpefiles.com/a_file.cfm?custid=Components&fileid=ramewf.zip&groupName=Other


Best regards,
Slobodan

PS: etprep is not required in this case.

 

[Günter Wirth]

Hello,

I tried the component "EWF RAM Registry"

I use multi(0)disk(0)rdisk(0)partition(1), that is the same as in the
boot.ini (but my CF is secondary slave)?

EwfEnable = 0

SrcFileSize=49152 (is this the size of the CF?)



I get the message "Failed getting protected volume configuration with error
1"



Regards,

Günter

Hi Günter,

Try avoiding FBA on CF. There is a one sector at the beginning of the disk

(let's say sector 50) that is written to with more that

 

[Slobodan Brcin \(eMVP\)]

Hi Günter,

I use multi(0)disk(0)rdisk(0)partition(1), that is the same as in the
boot.ini (but my CF is secondary slave)?

Keep it same as in boot.ini. (it is not important where CF is connected for these settings).

SrcFileSize=49152 (is this the size of the CF?)

No. You should not touch this value it is related to tools only.

I get the message "Failed getting protected volume configuration with error
1"

You should not have any errors present.

Make sure that you don't have EWF volume created from some previous XPe. If you have HDD connected it is possible that EWF volume is
created on HDD. Please make sure that you delete it.

Best regards,
Slobodan

Also just to be sure try following tests:
ewfmgr D:, E: .... etc. If you have more than C: on your system.

 

[Günter Wirth]

Thank you very much to all, it works now!

Here my summary:

1) It is not a good idea to test on the CF
2) The Microsoft documentation is partly incomplete:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnxpesp1/html/XPESP1_CF_EWF.asp

3) I added the component: "PnP(User-mode)" (hint from KM)



4) I use the file <How to install RAM EWF without temporary partition.rtf>
from
http://www.xpefiles.com/a_file.cfm?custid=Components&fileid=ramewf.zip&groupName=Other
to solve the problem.

Then I did:
ewfmgr C: -enable

ewfmgr C: -commit

reboot



Best Regards,

Günter