Below are the TWO related error code and related descriptions, (-21) indicates customer needs to adapt How to resolve remaining system files and Recover the MBR. (-22) indicates customer to Recover the MBR.
Unable to install the Encryption Management for Microsoft BitLocker agent. The master boot record (MBR) contains the Full Disk Encryption signature that may cause compatibility issues with the agent. Before installing the agent, perform the required actions provided in this Knowledge Base article to recover the MBR. (-22)
Click the image to enlarge.
How to resolve remaining system files:
There is a tool that can check and repair EFI. Tool 'CleanFDEBatches.zip'.
Requirement:.NET Framework 2.0/3.5 installed – This requirement should meet as “Full Disk Encryption” was installed before. Customer usually DO NOT uninstall .NET Framework as “Full Disk Encryption” uninstallation does NOT mention.
Unzip the correct X86 /x64 version CleanFDEBatches.zip
Command prompt program – run with local admin authority. Run tool by typing "CleanFDEBatches.exe", can check the return code by the command "echo %ERRORLEVEL%"
Suggestion: Customer deploy the tool to a few machines first to check/verify the tool resolves the issue.
Remember to Recover the MBR.
Recover the MBR
Fix the MBR again after remove TrendMicro EFI files.
Boot into windows start up repair or boot into Windows Recovery Environment by windows install ISO.
(Press Shift + F10 to open command prompt)
Run “bootrec /fixmbr”
Reboot machine