Enabling BitLocker

[cnelsenxx1]

Hi,

I followed this guide: https://smartdeploy.freshdesk.com/support/solutions/articles/48000966997-enable-bitlocker-with-deployment to create an Answer File that will enable BitLocker but I have a couple questions.

1. Where does the BitLocker recovery Key get saved in this process?

2. At the bottom of the article it recommends I disable secure boot and suspend BitLocker in Windows before proceeding with deployment. I've never suspended BitLocker before so I wanted to make sure this article I found was the proper way to do so: https://www.windowscentral.com/how-suspend-bitlocker-encryption-perform-system-changes-windows-10

[SmartDeploySupport]

Hello cnelsenxx1,

You'll need group policy to backup your recovery key. This is outlined in the link of that KB you found and here below:

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-7/dd875529(v=ws.10)

 

Yes, the instructions you found to suspend Bitlocker looks correct.

 

If you have any further questions, please reach out to us at support@smartdeploy.com.

 

Thanks,

 

Chris Mendoza

SmartDeploy Support

 

[ageister]

I am using the Recommended Bitlocker task for advanced on the Answer file. I am using this basic command as in SD documentation manage-bde.exe -on C: -RecoveryPassword -SkipHardwareTest

My Question is with this being done on first logon is there a time before it should start? We are seeing some not take a hold for sometime.

 

[SmartDeploySupport]

Hi AGeister,

The command-line should execute immediately, but it's difficult to say with certainty how long it should take after that point - it's a Windows utility, and it proceeds at its own pace from there. If you'd like to reach out to us at support@smartdeploy.com, we can take a look at a logset and confirm whether the command executed as expected, at FirstLogon.

Glenn
SmartDeploy Support