MBAM decommissioning: solutions

Question

Hi everyone,

one of my clients has MBAM for managing the encryption of laptops and removable disks, MBAM server + SQL database and Web Portal for key management.

MBAM will be decommissioned and the customer would like to replace it, they already have SCCM and before evaluating the move to Intune, I'd like to evaluate the use of SCCM. What are the use scenarios for SCCM and any impacts? In particular:

-Key database;

-Migration of existing database;
-Active Directory;

-Web management portal as was done with MBAM;

-Self Service Portal.

Thank you in advance,

Alessio.

Answer 1

Hi @49885604

Bitlocker can be managed by intune , but the device must be Microsoft Entra joined or Microsoft Entra hybrid joined.

For more information you can refer to this Microsoft article :

Manage BitLocker policy for Windows devices with Intune

---

Please don't forget to accept helpful answer which helps users to know the answer solved the author's problem.

Answer 2

Hi,

Thank you for posting in Microsoft Q&A forum.

We can seamlessly migrate management from MBAM to Configuration Manager. When we deploy BitLocker management policies in Configuration Manager, clients automatically rotate their keys and upload them to the Configuration Manager recovery service.

There is no MBAM database in Configuration Manager. All information pertaining to BitLocker management in Configuration Manager including recovery passwords are stored in the Configuration Manager database. The passwords simply get resaved to the Configuration Manager database.

For more detailed information, please refer to:

Migrate from MBAM

How to migrate standalone MBAM to SCCM for bitlocker

MBAM Server Migration To Microsoft Endpoint Manager

Move standalone MBAM to SCCM Integrated MBAM

Thanks for your time. Have a nice day!

Best regards,

Simon

---

If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 3

SCCM has MBAM solution integrated inside to it. So basically only MBAM standalone solution will expire.