New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 777034 link

Starred by 3 users

Issue metadata

Status: Assigned
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Bug



Sign in to add a comment

Error: Device installation-time attributes lock

Reported by wpi...@nysmithschool.com, Oct 20 2017

Issue description

UserAgent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.100 Safari/537.36

Steps to reproduce the problem:
1. Enterprise Enrollment 
2. Enter User Data
3. Error comers up.

What is the expected behavior?
To join to the enterprise and work.

What went wrong?
It will not connect to the enterprise network. I do note the time is correct for the time zone after connecting to a network.

Did this work before? Yes 

Chrome version: 61.0.3163.100  Channel: n/a
OS Version: 6.1 (Windows 7, Windows Server 2008 R2)
Flash Version: 

This was a problem in the past but that is like from 2015. I was able one to join but when I try three others it come up with the error.
 
IMG_1568.jpg
781 KB View Download
This is for installing Chromium on a laptop PC no Windows install at all.
Cc: vamshi.k...@techmahindra.com
Components: Enterprise
Labels: Triaged-ET Needs-Triage-M61 Needs-Feedback
@Reporter: As per your comment#1 and the steps mentioned in comment#0, Could you 
please clarify whether you are facing the issue while installing chromium or at the time of 
enrollment.

Thanks!
So I go through the whole install and it will work fine when I use for myself but when I try to enroll it in my company it pops up with this error as I posted above. That is the only time that I have this issue. I'm not quite sure what the error means as I set the time to my time zone. 
Project Member

Comment 4 by sheriffbot@chromium.org, Oct 23 2017

Labels: -Needs-Feedback
Thank you for providing more feedback. Adding requester "vamshi.kommuri@techmahindra.com" to the cc list and removing "Needs-Feedback" label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
So you want me to add more information?
Do** not so. in my statement above.
Would it be possible to ask what the error is doing? My time is set correct and I try looking around for what the installation-time attributes lock mean but I getting no where.
Cc: ligim...@chromium.org
Labels: -OS-Windows OS-Chrome
Loos like i=this occurs in CrOS
Owner: igorcov@chromium.org
Status: Assigned (was: Unconfirmed)
Igor, could you please take a look?
Thank you for reporting this.

The error says that the install attributes failed to be saved on the device. It has nothing to do with the system time. Might be because it doesn't have rights on some parts of the disk, or some other random error while writing to the disk.

Could you share the device logs taken from chrome://net-internals -> ChromeOS -> Store debug logs. You can sign in with the guest to collect them and upload here.
Labels: Needs-Feedback
There have been a similar problem with enrolling a device in our team and took the logs. Will need to investigate, but initially seems like there's a problem with access to endorsement key in cryptohome, because it is done without authorization.
logs.tar.gz
78.1 KB Download
Turns out the repro step involved having the device owned, flashing a new image on it and trying to enroll. The problem with this flow is that the TPM is not cleaned when the image is flashed, so it was inconsistent with install attributes that were cleaned from the device when the image was flashed.

Sign in to add a comment