EWF Error on cloned disk: Failed getting protected volume configuration with error 1.

[Scott Kelly]

I have tried both DISK and RAM based EWF system. Everything works great. I
use Norton Ghost to duplicate the drive and when I boot the cloned drive and
run ewfmgr, I get the error message:

Failed getting protected volume configuration with error 1.

I suspect it is because the extra partition that EWF uses was not cloned
properly.

Is there a way to tell EWF to reinitialize the EWF volume?

Here is the parts to my initial FBA Log - if that helps.

:
11:41:00 AM - [FBADoReboot] Exiting process...
11:42:16 AM - ConfigureEwf() Start.

11:42:16 AM - Getting EWF config parameters from registry.

11:42:16 AM - Non El Torito disk configuration.

11:42:16 AM - EWF Partition Size = 0 (KBytes), Levels = 1, Volumes = 1.

11:42:16 AM - Protected Volume Config #0 :

11:42:16 AM - Disk= 0,Part= 1,DiskType= IDE,Type= RAM.

11:42:16 AM - Enable= Disabled, Optimize= 0, LazyWrite= N.

11:42:16 AM - Found 1 Hard Disks.

11:42:16 AM - Disk #0 layout info:

11:42:16 AM - PRIMARY partition,start=0x0000000000007e00,
len=0x0000000040390800, type= 7

11:42:16 AM - PRIMARY partition,start=0x0000000040398600,
len=0x00000001ffd62800, type= 7

11:42:16 AM - FREE partition,start=0x00000002400fae00,
len=0x00000000170ade00, type= 0

11:42:16 AM - Allocating EWF in PRIMARY partition,
start=0x00000002400fae00, len=0x000000000000fc00.

11:42:17 AM - Created EWF partition on Disk = 0, partition = 3,size =
0x000000000000fc00 .

11:42:17 AM - ewfOpen.

11:42:17 AM - EWF Volume Config on Disk#0, Partition#3:

11:42:17 AM - Segments = 0, Max Volumes = 1, Max Levels = 1

11:42:17 AM - ewfAdd.

11:42:17 AM - Protected Volume Config on Disk0\Partition1 :

11:42:18 AM - Type = RAM, State= DISABLED.

11:42:18 AM - ewfClose

11:42:18 AM - Saving EWF configuration to registry:

11:42:18 AM - Protected Volume ArcName =
multi(0)disk(0)rdisk(0)partition(1).

11:42:18 AM - ConfigureEwf() End, status = 0x0.

11:42:18 AM - [CallEntryPointThread] C:\WINDOWS\system32\ewfdll.dll,
ConfigureEwf
11:42:18 AM - [FBASetProgressText] Resetting Setup Flag...
11:42:43 AM - [FBADoReboot] Sleeping...
11:42:53 AM - [FBADoReboot] Rebooting system...

 

[Slobodan Brcin]

I have tried both DISK and RAM based EWF system. Everything works great.
I

use Norton Ghost to duplicate the drive and when I boot the cloned drive and
run ewfmgr, I get the error message:

Failed getting protected volume configuration with error 1.

For RAM EWF you don't need partition, but you can't stop EWF without it.

Type> ewfmgr C:
to see status.


Best regards,
Slobodan

 

[Scott Kelly]

Slobodan,

It sure seems like the RAM EWF still needs it... when I run:
ewfmgr c:
I get the message:
Failed getting protected volume configuration with error 1.

If I just run:
ewfmgr
I get the following (notice the "Protected volumes" is blank)

The Ewf Volume is "\Device\HarddiskVolume3"
Ewf Volume Configuration
Volume Size 64512
Segments 0
Segment Size 0
Free segments 0
Max Levels 1
Max Protected Volumes 1
Protected Volumes 1

Ewf Volume percent full -1.#J

Protected volumes
Device Name ""


And in doing empirical testing, it appears EWF is not running. (Changes
made to my protected volume persist across reboots).

As an aside, notice that my percent full is "1.#J". Funny, when I tested
with DISK EWF the number displayed seemed correct. But with the RAM EWF
(even the master disk that is working correctly) shows the same "1.#J".
Hummm...what does that mean.

Scott

 

[Slobodan Brcin]

Hi Scott,

As an aside, notice that my percent full is "1.#J". Funny, when I tested
with DISK EWF the number displayed seemed correct. But with the RAM EWF
(even the master disk that is working correctly) shows the same "1.#J".
Hummm...what does that mean.

-1 Probably that EWF volume is not used for storing EWF run time states.


Try following,
Create working configuration with RAM EWF enabled and test it.
Then use gdisk.exe to delete EWF volume.
You will be able to commit states.
But you wont be able to disable EWF.
Then try to copy this image.

Best regards,
Slobodan

 

[Scott Kelly]

Slobodan... I had already started trying to do something else...

I looked at the Ghost documentation and found the -IR switch whichs does a
raw image copy from my master to my destination disk.

After doing a disk to disk copy using the -IR switch, my newly created disk
boots up great and doesn't give me any problems. All EWF functions seem to
work.

So - unless you want me to do the test you noted below (run gdisk to delete
EWF volumn), I'll move ahead to something else.

By the way, the percent full is still reported as "1.#J" - do you know why?

Thanks for your help.
Scott

 

[Slobodan Brcin]

Slobodan... I had already started trying to do something else...

I looked at the Ghost documentation and found the -IR switch whichs does a
raw image copy from my master to my destination disk.

After doing a disk to disk copy using the -IR switch, my newly created disk
boots up great and doesn't give me any problems. All EWF functions seem to
work.

So - unless you want me to do the test you noted below (run gdisk to delete
EWF volumn), I'll move ahead to something else.

If you are satisfied with what you have accomplished then you don't have to
try gdisk.

By the way, the percent full is still reported as "1.#J" - do you know

why?

Like I said 1.#J probably means that write changes don't go to EWF
partition.


Best regards,
Slobodan

 

[Doug Hoeffel]

The "1.#J" issue with ewfmgr is a known issue. You don't need to worry
about it.

HTH... Doug

 

[scchuang]

Re:EWFError on cloned disk:Failed getting protected volume configuration with error 1

To deal with the failed ewf function after Norton Ghost cloning,
you should keyin the command below

C:\rundll32 ewfdll.dll,ConfigureEwf
Notice: the "ConfigureEwf" parameter is casesensitive.

Then the ewf will re-initialized after rebooting.
Check the state, by using check command like C:\ewfmgr C: