Bitlocker on Virtual Machines

[Michael Brunker]

Is Bitlocker supported on virtual servers? We would like to implement virtual domain controllers and understand that Bitlocker cannot be used on Server 2012 R@ virtual machines. Is it supported on Server 2016 virtual machines?

[#2 · Accepted solution]

Yes, however there is a challange which is that MBAM doesn't support servers yet. Without MBAM you can still use BitLocker but it won't be as manageable as some customers would like. You won't get reporting or self service recovery. Some customers feel these capabilities are primarily for client OS. We tend to agree but we plan to add such functionality in the future. Based on priorities it won't happen any time soon.

-Chris 

[#3]

So without MBAM support, what are the options for server encryption recovery? Manually capture the recovery key and store in key safe?

[#4]

Managing your own key escrow? You're brave! 🙂

[#5]

Just asking the question to see what the options are without MBAM.

[#6]

@Michael Brunker you can store your Bitlocker keys, for your servers, in Active Directory. In can be done by utilizing the Bitlocker GPO and applying it to the respective OU where the computer resides.