> Source: [sk121880](https://support.checkpoint.com/results/sk/sk121880)

# sk121880 - Full Disk Encryption blade is stuck in "Setup Protection" state

| Property | Value |
|----------|-------|
| Solution ID | sk121880 |
| Date Created | 2017-12-11 |
| Last Modified | 2017-12-13 |
| Technical Level | Advanced |
| Products | Endpoint Security |
| Versions | Cloud, E89.X, E88.X |
| OS | Windows |

## Symptoms

- * FDE blade is stuck in "Setup Protection" state.  

* Encryption is not starting.  

* In *dlog1* , can see the following info:  

  ------====== ACTION RESULT ======------  
  \* Phase: Create System Areas  
  \* Action: Create System Areas  
  \* Result: Error  
  \* Error Code: 4  
  \* Message: Unable to clean up old SA file \\\\?\\Volume{XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}\\PROT_INS.SYS (error 32).  
  ------===========================------

## Cause

Some new laptop models have Recovery/Restore/Utility partition that comes preinstalled with the laptop. This can be a hidden partition.

If the FDE policy is configured to also encrypt hidden disk volumes, and this partition on the machine doesn't have enough free space for the FDE System Area (\~30 MB), you will see the above error.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content