Enable Bitlocker Task Sequence Missing

Question

Windows 2019 Standard server with MDT installed. We are looking at enabling Bitlocker with a PIN in a Task Sequence. However, the "TPM and PIN" option is missing in our Task Sequences! Under the "Choose the key management to use for the operating system drive" section we just have:

TPM only
Startup Key on USB only
TPM and Startup Key on USB

I have downloaded and installed the latest version of MDT. Windows is fully updated. What am I missing??

We have Bitlocker storing keys in AD and it is all working if done manually. Just haven't figured out the MDT/imaging way yet.

Answer 1

Hi there,

If you can not enable Bitlocker then you can then try troubleshooting MDT .
Troubleshooting Reference for the Microsoft Deployment Toolkit
https://learn.microsoft.com/en-us/troubleshoot/mem/configmgr/troubleshooting-reference

You can also try enabling the Bitlocker suing the Windows intune .Use one of the following policy types to configure BitLocker on your managed devices

-Endpoint security disk encryption policy for BitLocker.
-Device configuration profile for endpoint protection for BitLocker.

You can dig more info from here https://learn.microsoft.com/en-us/mem/intune/protect/encrypt-devices#silently-enable-bitlocker-on-devices

------------------------------------------------------------------------------------------------------------------------------------------------------------------
!

--If the reply is helpful, please Upvote and Accept it as an answer--