Bitlocker hardware not populating
-
Tuesday, December 04, 2012 4:07 PM
Hi All,
I have a problem with MBAM 2012. The client is contacting the server and encrypting. They show in the enterprise compliance report, but not under the hardware tab. Am I missing something obvious?
Thanks
Ian
All Replies
-
Tuesday, December 04, 2012 8:21 PMDid you set the Group Policy to ensure that the Hardware gets logged and approved?
PLEASE MARK ANY ANSWERS TO HELP OTHERS Blog: rorymon.com Twitter: @Rorymon
-
Wednesday, December 05, 2012 9:12 AM
I have set, client MGT - Configure MBAM Services, and specified the endpoints, which do resolve the services.
Disabled hardware compatibility checking
Operating System Driver - Operating system drive encryption settings - TPM only, no PIN.I can't see a policy for logging and approving?
Thanks
-
Wednesday, December 12, 2012 9:19 AM
Hi,
Please try the following action plans:
1. Disable the following GPO:
Removable data drives—Deny write access to removable data drives not protected by BitLocker—Disable
2. Insert the USB flash drive and note the drive letter assigned to it.
Although a BitLocker PIN can contain spaces, it is easier to avoid spaces when setting the PIN via the command line. Replace E with the drive letter assigned to the USB flash drive. C is the drive
to be encrypted. E is the location to save the StartupKey.
manage-bde -protectors -add C: -TPM –tp xxxx -tsk E:
Thanks.
Kevin Ni
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
-
Wednesday, December 12, 2012 9:29 AM
Hi Kevin,
Im not sure i understand the point in putting the key on a USB drive? It needs to populate in MBAM hardware tab?
Thanks
Ian
-
Thursday, December 13, 2012 4:05 AM
which version of MBAM software have you installed?
check from programs and features.
for MBAM 1.0 - enable allow hardware compatibility checking policy under client management for MDOP MBAM GPOs.
for MBAM 2.0 Beta - this feature is deprecated in standalone version.
Manoj Sehgal
- Marked As Answer by Ian.Southwell Thursday, December 13, 2012 12:42 PM
-
Thursday, December 13, 2012 9:34 AM
We are running MBAM from MDOP 2012, version 1.0.2001.1
I had enable hardware compatibility checking disabled. As i am still testing i will try it enabled and see how our test clients react.
Thanks for you help.
-
Thursday, December 13, 2012 12:42 PM
That works properly, thanks for your help. It is pretty useless for us anyway as we only have one manufacturer of laptop, so i'll leave it disabled.
Thanks

