BitLocker Startup PIN without User Interaction

Question

Hi,

We want to enable BitLocker Startup PIN using Intune. Is there a way by which the PIN can be setup without User interaction.

From my understanding, we will have to set PIN for each computer and requires user interaction.

Please help.

And does anyone have a script which can be deployed via intune for user to set their PreBoot BitLocker PIN?

Thanks in advance

Answer 1

@Kashish Goyal, Thanks for posting in Q&A. After researching, I find some links describe the script to enable BitLocker and set PIN. You can read them as a reference:

https://community.spiceworks.com/topic/2468449-enable-bitlocker-export-key-pin#:~:text=Powershell%20has%20several%20commands%20for,about%20BitLocker%20on%20the%20system.&text=Add%2DBitLockerKeyProtector%20configures%20protectors%2C%20such%20as%20a%20PIN.&text=Enable%2DBitLocker%20starts%20encryption.

https://techexpert.tips/powershell/powershell-encrypt-disk-bitlocker-tpm-pin/

https://katystech.blog/mem/bitlocker-with-pin

Note: Non-Microsoft link, just for the reference.

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

https://www.experts-exchange.com/articles/33771/We-have-bitlocker-so-we-need-MBAM-too.html is my article. Find the first script that sets a random PIN and read the whole text.