Hello,
We need to deploy BitLocker in AD environment on Windows 10 180x versions systems.
Previously, the disks on the laptops were encrypted with some other 3rd party product. The end-goal is basically replace this product with BitLocker and provide the same functionality as before:
User boots up his laptop directly to the OS login prompt without any prompts for additional security such as PIN or smart card during boot. In exact the same manner it is working with exiting 3rd party product.
In order to prepare the environment for deployment of Bitlocker we have decrypted the disks on several test machines, created GPO to store the corresponding BitLocker data in the AD as well as with some other settings. If required I can share all the corresponding details.
When running Get-TPM I see the following:
Are we able to start encrypting the disk at this point in time?
Is there anything else we need to take into account?
When I try to enable encryption using the following command:
Enable-BitLocker -MountPoint "C:" -TpmProtector
I'm getting the following error:
When I bring up tpm.msc, I see the following options:
It seems that I need to initialize it first, followed by running the encryption, am I assumption is correct?
If so, is that possible to do this completely remote?
Thank you.