Client always shows the System State as Inactive (Mfeepe.log errors: 0xEE010009 and 0xEE00000F)

Technical Articles ID: KB82652
Last Modified: 2/5/2020

Environment

McAfee Drive Encryption (DE) 7.1.x

For details of DE 7.1.x supported environments, see KB79422.

Problem 1

After DE is successfully installed, some systems that are configured to use Unified Extensible Firmware Interface (UEFI) fail to activate.

Client side shows:
The following details are recorded in the Encryption System Status window, even though the encryption policy was activated in ePolicy Orchestrator (ePO):

System State	Inactive
Volume Status	No volume information
Progress	Progress bar shows no encryption activity

ePO Console shows:
The administrator will see the following Client System Details for Drive Encryption:

State

In-Active

Clicking on More, Disks will show the following message:

No details available, as Drive Encryption is not Active

Problem 2

MfeEpe.log on the client records the following error:

userHandler: failed to process batched user data response: [0xEE010009] Failed to start activation services

ERROR MfeEpePcEncryptionProviderPlugin Failed to initialize the user file index service

ERROR EpoPlugin userHandler: failed to process batched user data response: [0xEE00000F] [0xEE00000F] Can't access the ESP: cannot open source file: \ArcName\multi(0)disk(0)rdisk(0)partition(1)\EFI\Microsoft\Boot\bootmgw.efi: 0xc0000034 (object not found)

Cause

Examining the Windows Boot Configuration Data (BCD) information you see the following two problems:

Windows Boot Manager is referencing a EFI file that does not exist
Windows Boot Loader is missing the Path statement.

Example output showing the problem when you use the command line: bcdedit /enum

Windows Boot Manager --------------------
identifier	{BOOTMGR.EN_US}
device	partition=\Device\HarddiskVolume1
path	\EFI\Microsoft\Boot\bootmgw.efi
locale	en-US
inherit	{GLOBALSETTINGS.EN_US}
integrityservices	Enable
default	{CURRENT.EN_US}
displayorder	{CURRENT.EN_US}
toolsdisplayorder	{MEMDIAG.EN_US}
timeout	30

Windows Boot Loader -------------------
Identifier	{CURRENT.EN_US}
device	partition=C:
<< Missing path statement >>
description	Windows
locale	en-US
inherit	{BOOTLOADERSETTINGS.EN_US}
recoverysequence	{f4147099-11a2-11e4-825a-6c3be58569b2}
integrityservices	Enable
recoveryenabled	Yes
isolatedcontext	Yes
allowedinmemorysettings	0x15000075
osdevice	partition=C:
systemroot	\Windows
nx	OptIn
bootmenupolicy	Standard

Solution 1

Run the following commands from an elevated command prompt to resolve the boot configuration issues.

Click Start, All Programs, Accessories.
Right-click Command Prompt, and select Run as administrator. If you are prompted for an administrator password, enter the necessary credentials.
Type each of the following commands and press ENTER after each one:

Bcdedit /set {DEFAULT.EN_US} path \windows\system32\winload.efi

Bcdedit /set {BOOTMGR.EN_US} path \efi\microsoft\boot\bootmgfw.efi
Close the command prompt Window.
Restart the system.

Solution 2

If the above solution does not resolve this issue, search the Knowledgebase using the following string including the double quotes to locate other content covering inactive issues:

"Drive Encryption client always shows the System State as Inactive"

Affected Products

Drive Encryption 7.2
Install/Uninstall

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Portuguese Brasileiro

Knowledge Center

Client always shows the System State as Inactive (Mfeepe.log errors: 0xEE010009 and 0xEE00000F)

Environment

Problem 1

Problem 2

Cause

Solution 1

Solution 2

Affected Products

Languages:

Title

Title

Knowledge Center

Client always shows the System State as Inactive (Mfeepe.log errors: 0xEE010009 and 0xEE00000F)

Environment

Problem 1

Problem 2

Cause

Solution 1

Solution 2

Affected Products

Languages:

Choose your region

Title

Title