There are a second log file on the client as well, BitlockerManagement_GroupPolicyHandler.log which does what it says it applies the settings from the MBAM Bitlocker Policy. When the policy is applied to the machine the SCCM client kicks of the installation of the MBAM client automatically from C:\Windows\CCM as shown here in BitlockerManagementHandler.log So no more updating of the MBAM backend services, Yeah! 😀 We have an eventlog for troubleshooting as well. On the Management Point we have a new Endpoint in IIS (Yes, I had to do some manual steps to get it working). Here we create our MBAM policy, it is the same settings we have in the GPO except for the Reporting endpoint URL is removed. On the server side we create our MBAM policies under Assets and Compliance\Endpoint Protection\Bitlocker Management And it makes sense, do you want to transfer your Bitlocker keys over HTTP? No, Let’s hope that the released version will Support Enhanced HTTP where self-signed certificates are used. To start with you need to run your Configuration manager site in HTTPS mode. We can cleanup our AD an have it up to date with active clients and still have the recovery keys available if an old computer surfaces that needs to be unlocked. MBAM is still the best way to manage your Bitlocker keys today, for having the Recovery keys in a Database separate from Active Directory provides protection against accidental deletion of a computer account and then the Bitlocker recovery key is gone as well. – Updating the MBAM backend with new Service Releases is not painless today, and now we don’t need to anymore!
– No additional infrastructure for MBAM, the Management Point role will have the MBAM Recovery and Hardware service. – MBAM client being part of the SCCM client, so no separate installation and updating anymore This is one of the big features me and all my customers are looking forward to! It will make managing MBAM much easier than today by providing: Spent last night testing this one out, Microsoft Bitlocker and Managment tool built in SCCM. SCCM integrated MBAM services in Technical Preview 1908.2
0 kommentar(er)
