BdeHdCfg.exe

  • File Path: C:\WINDOWS\system32\BdeHdCfg.exe
  • Description: BitLocker Drive Encryption: Drive Preparation Tool

Hashes

Type Hash
MD5 131722BA9E3867893E6208BD71B3169E
SHA1 00E787D40021F6ADFC1E4FF6A581A8FB4D3E8B0C
SHA256 DCBE69E00C308BB747F2A7A6635AACAF167945C5BCC3E02C8AEF5EDF33F8985D
SHA384 DBB7E44113A16B4A73EA6D7CD0C9DC5D752655F4917B576E2F91965D0E7B77CEDAA82B184E63AC6808DB304F17AC71FA
SHA512 CDD99F521BE019A2D76F21CF2447C64EBA0683DE010DBBC01C4282FE06AE94063FD660ABD2B41017B779E479443F05AA518D9E5FF4FA30130476C0EEAF3F339D
SSDEEP 3072:y2S02caHXaQRKHVZzwnVS570M9kdatGCO+xmBc+hMPhPsx:x0HFKHVZ8Vs7nyatGt+SYF
IMP BED35470582631F338EFA043107C9B11
PESHA1 E2201B3CE38639A9960EDF57F88614DDA44D4275
PE256 B24B0A7165CDFFA70D402DD67F6B3650882087F16E3063A068BF5E9B39DC23BF

Runtime Data

Usage (stdout):

BitLocker Drive Preparation Tool version 10.0.22000
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

Usage:

BdeHdCfg[.exe] 
               [-driveinfo]
               [-target {default | unallocated | 
                         TargetDriveLetter {shrink | merge} }]
               [-newdriveletter DriveLetter]
               [-size SizeInMegabytes]
               [-quiet] [-restart] [{-? | /?}]

Description:
  This command prepares your hard drive for BitLocker Drive Encryption.

  Command line parameters are not case-sensitive.

Parameters:
  -driveinfo
        Displays information about valid target drives.

  -target
        Specifies the target and operation.

        Specify 'shrink' to create a new active partition.
        Specify 'merge' to make an existing partition active.
        Specify 'unallocated' to use unformatted space on disk.
        Specify 'default' for the target to be chosen automatically.

        Examples: -target D: merge
                  -target C: shrink
                  -target unallocated
                  -target default

  -newdriveletter
        Specifies the desired drive letter for the new drive. This option is
        only valid when a new drive is created.

        Example: -newdriveletter S:

  -size
        Specifies the desired size of the new drive. This option is only valid
        when a new drive is created.

        If not specified, the Drive Preparation Tool assumes the required
        minimum size of 654 megabytes.

        Example: -size 700
        
  -quiet
        Specifies operation in quiet mode. No output from the drive preparation
        tool is displayed.

  -restart
        Enables an automatic restart after drive preparation.

        You must restart your computer before enabling BitLocker.

  -? or /?
        Displays help for this command.

Examples:
    BdeHdCfg -target c: shrink -newdriveletter x: -size 654 -quiet -restart
    BdeHdCfg -target d: merge -quiet -restart
    BdeHdCfg -target unallocated -newdriveletter s:
    BdeHdCfg -target default


Loaded Modules:

Path
C:\WINDOWS\system32\BdeHdCfg.exe
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: BdeHdCfg.exe.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/dcbe69e00c308bb747f2a7a6635aacaf167945c5bcc3e02c8aef5edf33f8985d/detection

File Similarity (ssdeep match)

File Score
C:\Windows\system32\baaupdate.exe 72
C:\WINDOWS\system32\baaupdate.exe 77
C:\windows\system32\baaupdate.exe 74
C:\WINDOWS\system32\baaupdate.exe 77
C:\Windows\system32\baaupdate.exe 72
C:\Windows\system32\BdeHdCfg.exe 82
C:\WINDOWS\system32\BdeHdCfg.exe 88
C:\Windows\system32\BdeHdCfg.exe 83
C:\windows\system32\BdeHdCfg.exe 72
C:\Windows\system32\bdeunlock.exe 44
C:\Windows\system32\bdeunlock.exe 43
C:\WINDOWS\system32\bdeunlock.exe 41
C:\WINDOWS\system32\bdeunlock.exe 44
C:\windows\system32\bdeunlock.exe 54
C:\Windows\system32\bdeunlock.exe 44
C:\WINDOWS\system32\BitLockerWizard.exe 75
C:\Windows\system32\BitLockerWizard.exe 77
C:\windows\system32\BitLockerWizard.exe 82
C:\WINDOWS\system32\BitLockerWizard.exe 74
C:\Windows\system32\BitLockerWizard.exe 74
C:\Windows\system32\BitLockerWizard.exe 79
C:\Windows\system32\BitLockerWizardElev.exe 74
C:\Windows\system32\BitLockerWizardElev.exe 75
C:\WINDOWS\system32\BitLockerWizardElev.exe 75
C:\Windows\system32\BitLockerWizardElev.exe 75
C:\windows\system32\BitLockerWizardElev.exe 79
C:\WINDOWS\system32\BitLockerWizardElev.exe 75
C:\Windows\system32\fvecpl.dll 40
C:\Windows\system32\fvenotify.exe 71
C:\WINDOWS\system32\fvenotify.exe 54
C:\windows\system32\fvenotify.exe 68
C:\WINDOWS\system32\fvenotify.exe 66
C:\Windows\system32\fvenotify.exe 63
C:\WINDOWS\system32\fveprompt.exe 65
C:\Windows\system32\fveprompt.exe 63
C:\Windows\system32\fveprompt.exe 66
C:\WINDOWS\system32\fveprompt.exe 65
C:\windows\system32\fveprompt.exe 65
C:\Windows\system32\fveui.dll 44
C:\WINDOWS\system32\manage-bde.exe 54
C:\Windows\system32\manage-bde.exe 52
C:\Windows\system32\manage-bde.exe 50
C:\WINDOWS\system32\manage-bde.exe 47
C:\windows\system32\manage-bde.exe 55
C:\Windows\system32\repair-bde.exe 71
C:\WINDOWS\system32\repair-bde.exe 71
C:\WINDOWS\system32\repair-bde.exe 68
C:\windows\system32\repair-bde.exe 71
C:\Windows\system32\repair-bde.exe 68

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.


bdehdcfg

Prepares a hard drive with the partitions necessary for BitLocker Drive Encryption. Most installations of Windows 7 will not need to use this tool because BitLocker setup includes the ability to prepare and repartition drives as required.

[!WARNING] There is a known conflict with the Deny write access to fixed drives not protected by BitLocker Group Policy setting located in Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Fixed Data Drives.

If bdehdcfg is run on a computer when this policy setting is enabled, you may encounter the following issues:

  • If you attempted to shrink the drive and create the system drive, the drive size will be successfully reduced and a raw partition will be created. However, the raw partition will not be formatted. The following error message is displayed: The new active Drive cannot be formatted. You may need to manually prepare your drive for BitLocker.

  • If you attempted to use unallocated space to create the system drive, a raw partition will be created. However, the raw partition will not be formatted. The following error message is displayed: The new active Drive cannot be formatted. You may need to manually prepare your drive for BitLocker.

  • If you attempted to merge an existing drive into the system drive, the tool will fail to copy the required boot file onto the target drive to create the system drive. The following error message is displayed: BitLocker setup failed to copy boot files. You may need to manually prepare your drive for BitLocker.

  • If this policy setting is being enforced, a hard drive cannot be repartitioned because the drive is protected. If you are upgrading computers in your organization from a previous version of Windows and those computers were configured with a single partition, you should create the required BitLocker system partition before applying the policy setting to the computers.

Syntax

bdehdcfg [–driveinfo <drive_letter>] [-target {default|unallocated|<drive_letter> shrink|<drive_letter> merge}] [–newdriveletter] [–size <size_in_mb>] [-quiet]
Parameters
Parameter Description
bdehdcfg: driveinfo Displays the drive letter, the total size, the maximum free space, and the partition characteristics of the partitions on the drive specified. Only valid partitions are listed. Unallocated space is not listed if four primary or extended partitions already exist.
bdehdcfg: target Defines which portion of a drive to use as the system drive and makes the portion active.
bdehdcfg: newdriveletter Assigns a new drive letter to the portion of a drive used as the system drive.
bdehdcfg: size Determines the size of the system partition when a new system drive is being created.
bdehdcfg: quiet Prevents the display of all actions and errors in the command-line interface and directs bdehdcfg to use the Yes answer to any Yes/No prompts that may occur during subsequent drive preparation.
bdehdcfg: restart Directs the computer to restart after the drive preparation has finished.
/? Displays Help at the command prompt.

Additional References


MIT License. Copyright (c) 2020-2021 Strontic.