What's New in MBAM Language Release

  • Article

Applies To: Microsoft BitLocker Administration and Monitoring

Microsoft BitLocker Administration and Monitoring (MBAM) 1.0 Language Release is an update to Microsoft BitLocker Administration and Monitoring and includes the support of new languages. The new languages are:

  • English (en-us)

  • French (fr)

  • Italian (it)

  • German (de)

  • Spanish (es)

  • Korean (ko)

  • Japanese (ja)

  • Brazilian Portuguese (pt-br)

  • Russian (ru)

  • Chinese Traditional (zh-tw)

  • Chinese Simplified (zh-cn)

The MBAM 1.0 language update changes the version from 1.0.1237.1 to MBAM 1.0.2001.

You do not need to reinstall all of the MBAM components to add the additional languages. This document, defines the exact steps required to add the supported languages.

Server Components

Three MBAM server components must be updated:

  • Compliance and Audit Report

  • Administration and Monitoring Server

  • Policy Templates

You must upgrade the MBAM components that run on the same server at the same time by running MbamSetup.exe.

Known Issues in the MBAM International Release

This section contains known issues for Microsoft BitLocker Administration and Monitoring International Release.

The Installation Process Does Not Specify Update

Description: Upon updating the MBAM server or servers, the setup program does not state that an update is being installed.

Workaround: None.

Certificates used for Administration and Monitoring Server Role

If you are using a certificate for authentication between MBAM servers, after updating the MBAM Administration and Monitoring server you must ensure that the certificate is valid and not revoked or expired.

MBAM Svclog file filling disk space

If you have followed Knowledge Base article 2668170, https://support.microsoft.com/kb/2668170 (https://go.microsoft.com/fwlink/?LinkID=247277), then after installing this update you might have to repeat the KB steps.

Upgrade the MBAM Language Update Server on a Single Server

Microsoft BitLocker Administration and Monitoring includes four server roles that can be run on one or more computers. To update all four MBAM roles installed on one computer, perform the following steps:

How to Upgrade a Single Server to the MBAM Language Update

  1. Open the Internet Information Services (IIS) Management Console, go to Sites, and then shut down the ‘Microsoft BitLocker Administration and Monitoring’ website.

  2. Edit the bindings for the ‘Microsoft BitLocker Administration and Monitoring,’ and then temporarily modify the bindings of the site. For example, change the port from 443 to 9443.

  3. Locate and run the Microsoft BitLocker Administration and Monitoring setup wizard (MBAMsetup.exe) and select the following three features:

    1. Compliance and Audit Reports

    2. Administration and Monitoring Server

    3. Group Policy Templates

    Important

    The MBAM server features must be updated in order: Compliance and Audit Reports, then Administration and Monitoring Server. The group policy templates can be updated at any time without concern for sequence.

  4. After you upgrade the server database, open IIS Management Console and review the bindings of the “MBAM BitLocker Administration and Monitoring” website.

  5. Delete one of the bindings and ensure that the remaining binding has the correct host name, certificate, and port number for the Microsoft BitLocker Administration and Monitoring enterprise configuration.

  6. Restart the ‘Microsoft BitLocker Administration and Monitoring’ website.

  7. Test the MBAM website functionality:

    • Open the MBAM web interface and ensure you can fetch recovery key for a client.

    • Enforce encryption of a new or manually decrypted client computer.

      Note

      The MBAM client only opens if it can communicate with the “Recovery and Hardware” database.

Upgrade the MBAM Language Update Roles on Two or More Servers

Microsoft BitLocker Administration and Monitoring includes four server roles that can be run on one or more computers. In configurations with the MBAM roles installed on multiple computers only the following servers need to be updated:

  • The MBAM “Compliance and Audit Reports” server

  • The MBAM “Administration and Monitoring Server” server

Important

The MBAM server features must be updated in order: Compliance and Audit Reports, then Administration and Monitoring Server. The group policy templates can be updated at any time without concern for sequence.

How to Upgrade MBAM Compliance and Audit Report Feature for MBAM Language Update

  1. On the computer running the MBAM Compliance and Audit Report feature, locate and run the Microsoft BitLocker Administration and Monitoring Language Update setup wizard (MBAMsetup.exe).

  2. Complete the wizard for the “Compliance and Audit Report” feature and then close the wizard. For more information about the Compliance and Audit feature, see Deploying MBAM on Distributed Servers.

How to Upgrade MBAM Administration and Monitoring Server for MBAM Language Update

  1. On the computer running the MBAM Administration and Monitoring feature, open the Internet Information Services (IIS) management console, go to Sites, and then shut down the Microsoft BitLocker Administration and Monitoring website.

  2. Choose to edit the bindings for the ‘Microsoft BitLocker Administration and Monitoring,’ and then modify the bindings of the site. For example, change the port from 443 to 9443.

  3. Locate and run the Microsoft BitLocker Administration and Monitoring Language Update setup wizard (MBAMsetup.exe). Complete the wizard for the “Administration and Monitoring” Server feature and then close the wizard. For more information about the Administration and Monitoring, see Deploying MBAM on Distributed Servers.

  4. After you upgrade the server database, open IIS Management Console and review the bindings of the “MBAM BitLocker Administration and Monitoring” website.

  5. Delete the old binding and ensure that the remaining binding has the correct host name, certificate, and port number for the Microsoft BitLocker Administration and Monitoring enterprise configuration.

  6. Restart the ‘Microsoft BitLocker Administration and Monitoring’ website.

  7. Test the MBAM website functionality:

    • Open the MBAM web interface and ensure you can fetch recovery key for a client.

    • Enforce encryption of a new or manually decrypted client computer.

      Note

      The MBAM client only opens if it can communicate with the “Recovery and Hardware” database.

About Installing the MBAM Language Update for Group Policies

The MBAM group policy templates can be installed either on each management workstation or copied to the Group Policy central store to make the templates available to all Group Policy administrators. The policies cannot be directly installed on a domain controller. If a Group Policy central store is not used, then they you must copy the policies manually to each domain controllers that manages MBAM group policy.

To add the MBAM language policies templates, copy the group policy language files from %SystemRoot%\PolicyDefinitions on the computer where the “Policy Templates” role was installed to the same location on the workstation computer. Examples of group policy files include:

  • BitLockerManagement.admx

  • BitLockerUserManagement.admx

  • en-us\BitLockerManagement.adml

  • en-us\BitLockerUserManagement.adml

  • fr-fr\ BitLockerManagement.adml

  • fr-fr\ BitLockerUserManagement.adml

  • …for each supported language

Updating the MBAM Client

You can update the MBAM client on computers after upgrading the MBAM server computers to the MBAM International Release, but it is not required. To deploy the MBAM Language Release client, run the MbamClientSetup.exe file located in the MBAM Language Release update. If you choose to update the MBAM client, you can update it without first uninstalling the MBAM client.

See Also

Concepts

Getting Started With MBAM
About Microsoft BitLocker Administration and Monitoring
High-Level Architecture for MBAM