Add Bitlocker certificate-based DRA to Inunte managed machines

[IstvanffyZ]

Hello,

We manage Bitlocker with Intune (MEM). How can we add certitificated-based DRA (issued by on-premise CA) for those machines?

This feature is requested in August 2020 on Uservoice portal, but no answer yet. Any manual way?

Regards,

Zoltan

[#2 · Accepted solution]

Hi @IstvanffyZ,

the best I know how to maybe accomplish this is what is mentioned here: https://stackoverflow.com/questions/12822153/adding-efs-data-recovery-agent-dra-certificate-programm...

Here is the Specifications to it:

https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-gpef/50047b06-23f7-4474-a2aa-f502de4...

best,

Oliver