SOLVED

Smartcard Support for Bitlocker PreBootAuthentication

%3CLINGO-SUB%20id%3D%22lingo-sub-80702%22%20slang%3D%22en-US%22%3ESmartcard%20Support%20for%20Bitlocker%20PreBootAuthentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-80702%22%20slang%3D%22en-US%22%3EThere%20is%20still%20no%20support%20for%20smartcard%20or%20tokens%20for%20unlocking%20Bitlocker%20protected%20system%20volumes%20before%20booting%20(PreBootAuthentication).%20Only%20pin%20and%20USB%20key%20as%20well%20as%20TPM%20is%20supported.%20Any%20plans%20to%20extend%20these%20possibilities%3F%20Timeline%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-199734%22%20slang%3D%22en-US%22%3ERe%3A%20Smartcard%20Support%20for%20Bitlocker%20PreBootAuthentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-199734%22%20slang%3D%22en-US%22%3E%3CP%3EWas%20there%20any%20more%20information%20on%20what's%20coming%20in%20the%20future%20with%20regards%20to%20BitLocker%20and%20smart%20tokens%2Fcards%2Fetc%20or%20similar%20capabilities%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-80856%22%20slang%3D%22en-US%22%3ERe%3A%20Smartcard%20Support%20for%20Bitlocker%20PreBootAuthentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-80856%22%20slang%3D%22en-US%22%3E%3CP%3EWhile%20you%20should%20not%20expect%20support%20for%20these%20types%20of%20factors%20in%20the%20pre-boot%20enviroment%20you%20should%20expect%20future%20updates%20to%20our%20disk%20encryption%20solutions%20that%20will%20address%20your%20requirement%26nbsp%3Busing%20a%20different%20and%20much%20better%20approach.%20For%20now%20I'll%20just%20tip%20our%20hat%20but%20I%20can%20assure%20you'll%20like%20it%20quite%20a%20bit.%20I%20look%20forward%20to%20sharing%20more.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-80737%22%20slang%3D%22en-US%22%3ERe%3A%20Smartcard%20Support%20for%20Bitlocker%20PreBootAuthentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-80737%22%20slang%3D%22en-US%22%3EVery%20true!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-80735%22%20slang%3D%22en-US%22%3ERe%3A%20Smartcard%20Support%20for%20Bitlocker%20PreBootAuthentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-80735%22%20slang%3D%22en-US%22%3EThere%20are%203rd%20party%20solutions%20which%20provide%20smartcard%20PreBootAuthentication%20for%20Bitlocker%20like%20the%20product%20CPSD%20SecureDisk.%20But%20with%20windows%20as%20a%20service%20bringing%20biannual%20releases%20it%20would%20be%20less%20risk%20to%20get%20in%20troubles%20with%20compatibility%20issues%20if%20this%20could%20be%20a%20Microsoft%20provided%20native%20feature.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-80706%22%20slang%3D%22en-US%22%3ERe%3A%20Smartcard%20Support%20for%20Bitlocker%20PreBootAuthentication%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-80706%22%20slang%3D%22en-US%22%3E%3CP%3EI%20think%20HP%20has%20done%20something%20here%20so%20that%20you%20can%20use%20your%20fingerprint%20for%20it.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Frequent Contributor
There is still no support for smartcard or tokens for unlocking Bitlocker protected system volumes before booting (PreBootAuthentication). Only pin and USB key as well as TPM is supported. Any plans to extend these possibilities? Timeline?
5 Replies

I think HP has done something here so that you can use your fingerprint for it.

There are 3rd party solutions which provide smartcard PreBootAuthentication for Bitlocker like the product CPSD SecureDisk. But with windows as a service bringing biannual releases it would be less risk to get in troubles with compatibility issues if this could be a Microsoft provided native feature.
Best Response confirmed by Gunnar Haslinger (Frequent Contributor)
Solution

While you should not expect support for these types of factors in the pre-boot enviroment you should expect future updates to our disk encryption solutions that will address your requirement using a different and much better approach. For now I'll just tip our hat but I can assure you'll like it quite a bit. I look forward to sharing more. 

Was there any more information on what's coming in the future with regards to BitLocker and smart tokens/cards/etc or similar capabilities?