Modifica del file Configuration.mof

Articolo
12/12/2013

Si applica a: Microsoft BitLocker Administration and Monitoring 2.0, Microsoft BitLocker Administration and Monitoring 2.0 SP1

Se si utilizza Configuration Manager 2007 o System Center 2012 Configuration Manager, è necessario modificare il file Configuration.mof per consentire ai computer client di restituire i dati di conformità BitLocker tramite i report di Configuration Manager di MBAM. Completare le seguenti procedure per la versione di Configuration Manager in uso.

Importante

Se si installa Microsoft BitLocker Administration and Monitoring (MBAM) 2.0 Service Pack 1 (SP1), sia come nuova versione che come aggiornamento da una versione precedente, fare riferimento alla sezione appropriata in Informazioni su MBAM 2.0 SP1, come riportato nell'elenco seguente:

Per una nuova installazione di MBAM 2.0 SP1, vedere File necessari per l'installazione di MBAM 2.0 SP1 se si utilizza MBAM con Configuration Manager.
Per un aggiornamento a MBAM 2.0 SP1, vedere Aggiornare il file Configuration.mof file se si esegue l'aggiornamento a MBAM 2.0 SP1 e se si utilizza MBAM con Configuration Manager 2007.

Per creare il file Configuration.mof se MBAM 2.0 SP1 viene utilizzato con Configuration Manager

Fare riferimento alla nota "Importante" relativa a MBAM 2.0 SP1 precedentemente illustrata nel presente argomento per seguire le procedure appropriate in Informazioni su MBAM 2.0 SP1.

Per modificare il file Configuration.mof per System Center 2012 Configuration Manager

Nel server di Configuration Manager, passare al percorso del file Configuration.mof:

<PercorsoInstallazioneCM>\Inbox\clifiles.src\hinv\

In un'installazione predefinita, il percorso di installazione è %unitàsistema%\Programmi\Microsoft Configuration Manager.

Modificare il file Configuration.mof per aggiungere le seguenti classi di MBAM:

//===================================================

// Microsoft BitLocker Administration and Monitoring 

//===================================================

#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("Win32_BitLockerEncryptionDetails", NOFAIL)

[Union, ViewSources{"select DeviceId, BitlockerPersistentVolumeId, BitLockerManagementPersistentVolumeId, BitLockerManagementVolumeType, DriveLetter, Compliant, ReasonsForNonCompliance, KeyProtectorTypes, EncryptionMethod, ConversionStatus, ProtectionStatus, IsAutoUnlockEnabled from Mbam_Volume"}, ViewSpaces{"\\\\.\\root\\microsoft\\mbam"}, dynamic, Provider("MS_VIEW_INSTANCE_PROVIDER")]

class Win32_BitLockerEncryptionDetails

{

    [PropertySources{"DeviceId"},key]

    String     DeviceId;

    [PropertySources{"BitlockerPersistentVolumeId"}]

    String     BitlockerPersistentVolumeId;

    [PropertySources{"BitLockerManagementPersistentVolumeId"}]

    String     MbamPersistentVolumeId;

    //UNKNOWN = 0, OS_Volume = 1, FIXED_VOLUME = 2, REMOVABLE_VOLUME = 3

    [PropertySources{"BitLockerManagementVolumeType"}]

    SInt32     MbamVolumeType;

    [PropertySources{"DriveLetter"}]

    String     DriveLetter;

    //VOLUME_NOT_COMPLIANT = 0, VOLUME_COMPLIANT = 1, NOT_APPLICABLE = 2

    [PropertySources{"Compliant"}]

    SInt32     Compliant;

    [PropertySources{"ReasonsForNonCompliance"}]

    SInt32     ReasonsForNonCompliance[];

    [PropertySources{"KeyProtectorTypes"}]

    SInt32     KeyProtectorTypes[];

    [PropertySources{"EncryptionMethod"}]

    SInt32     EncryptionMethod;

    [PropertySources{"ConversionStatus"}]

    SInt32     ConversionStatus;

    [PropertySources{"ProtectionStatus"}]

    SInt32     ProtectionStatus;

    [PropertySources{"IsAutoUnlockEnabled"}]

    Boolean     IsAutoUnlockEnabled;

};


#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("Win32Reg_MBAMPolicy", NOFAIL)

 [DYNPROPS]

Class Win32Reg_MBAMPolicy

{

    [key]

    string KeyName;


    //General encryption requirements

    UInt32    OsDriveEncryption;

    UInt32    FixedDataDriveEncryption;

    UInt32    EncryptionMethod;


    //Required protectors properties

    UInt32    OsDriveProtector;

    UInt32    FixedDataDriveAutoUnlock;

    UInt32    FixedDataDrivePassphrase;


    //MBAM agent fields

    Uint32    MBAMPolicyEnforced;

    string    LastConsoleUser;

    datetime  UserExemptionDate;

    UInt32    MBAMMachineError;


    // Encoded computer name

    string    EncodedComputerName;

};


[DYNPROPS]

Instance of Win32Reg_MBAMPolicy

{

KeyName="BitLocker policy";


    //General encryption requirements


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|ShouldEncryptOsDrive"),Dynamic,Provider("RegPropProv")]

    OsDriveEncryption;

[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|ShouldEncryptFixedDataDrive"),Dynamic,Provider("RegPropProv")]

    FixedDataDriveEncryption;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE|EncryptionMethod"),Dynamic,Provider("RegPropProv")]

    EncryptionMethod;


    //Required protectors properties


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|OSVolumeProtectorPolicy"),Dynamic,Provider("RegPropProv")]

    OsDriveProtector;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|AutoUnlockFixedDataDrive"),Dynamic,Provider("RegPropProv")]

    FixedDataDriveAutoUnlock;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE|FDVPassphrase"),Dynamic,Provider("RegPropProv")]

    FixedDataDrivePassphrase;


    //MBAM agent fields


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|MBAMPolicyEnforced"),Dynamic,Provider("RegPropProv")]

    MBAMPolicyEnforced;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|LastConsoleUser"),Dynamic,Provider("RegPropProv")]

    LastConsoleUser;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|UserExemptionDate"),Dynamic,Provider("RegPropProv")]

    UserExemptionDate; //Registry value should be string in the format of yyyymmddHHMMSS.mmmmmmsUUU


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|MBAMMachineError"),Dynamic,Provider("RegPropProv")]

    MBAMMachineError;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|EncodedComputerName"),Dynamic,Provider("RegPropProv")]

    EncodedComputerName;

};


#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("CCM_OperatingSystemExtended", NOFAIL)

[Union, ViewSources{"select Name,OperatingSystemSKU from Win32_OperatingSystem"}, ViewSpaces{"\\\\.\\root\\cimv2"},

dynamic,Provider("MS_VIEW_INSTANCE_PROVIDER")]

class CCM_OperatingSystemExtended

{

    [PropertySources{"Name"},key]

    string     Name;

    [PropertySources{"OperatingSystemSKU"}]

    uint32     SKU;

};


#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("CCM_ComputerSystemExtended", NOFAIL)

[Union, ViewSources{"select Name,PCSystemType from Win32_ComputerSystem"}, ViewSpaces{"\\\\.\\root\\cimv2"},

dynamic,Provider("MS_VIEW_INSTANCE_PROVIDER")]

class CCM_ComputerSystemExtended

{

    [PropertySources{"Name"},key]

    string     Name;

    [PropertySources{"PCSystemType"}]

    uint16     PCSystemType;

};


//=======================================================

// Microsoft BitLocker Administration and Monitoring end

//=======================================================

Per modificare il file Configuration.mof per Configuration Manager 2007

Nel server di Configuration Manager, passare al percorso del file Configuration.mof:

<PercorsoInstallazioneCM>\Inbox\clifiles.src\hinv\

In un'installazione predefinita, il percorso di installazione è %unitàsistema%\Programmi(x86)\Microsoft Configuration Manager.

Modificare il file Configuration.mof per aggiungere le seguenti classi di MBAM:

//===================================================

// Microsoft BitLocker Administration and Monitoring 

//===================================================


#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("Win32_BitLockerEncryptionDetails", NOFAIL) 

[Union, ViewSources{"select DeviceId, BitlockerPersistentVolumeId, BitLockerManagementPersistentVolumeId, BitLockerManagementVolumeType, DriveLetter, Compliant, ReasonsForNonCompliance, KeyProtectorTypes, EncryptionMethod, ConversionStatus, ProtectionStatus, IsAutoUnlockEnabled from Mbam_Volume"}, ViewSpaces{"\\\\.\\root\\microsoft\\mbam"}, dynamic, Provider("MS_VIEW_INSTANCE_PROVIDER")]

class Win32_BitLockerEncryptionDetails

{

    [PropertySources{"DeviceId"},key]

    String     DeviceId;

    [PropertySources{"BitlockerPersistentVolumeId"}]

    String     BitlockerPersistentVolumeId;

    [PropertySources{"BitLockerManagementPersistentVolumeId"}]

    String     MbamPersistentVolumeId;

    //UNKNOWN = 0, OS_Volume = 1, FIXED_VOLUME = 2, REMOVABLE_VOLUME = 3

    [PropertySources{"BitLockerManagementVolumeType"}]

    SInt32     MbamVolumeType;

    [PropertySources{"DriveLetter"}]

    String     DriveLetter;

    //VOLUME_NOT_COMPLIANT = 0, VOLUME_COMPLIANT = 1, NOT_APPLICABLE = 2

    [PropertySources{"Compliant"}]

    SInt32     Compliant;

    [PropertySources{"ReasonsForNonCompliance"}]

    SInt32     ReasonsForNonCompliance[];

    [PropertySources{"KeyProtectorTypes"}]

    SInt32     KeyProtectorTypes[];

    [PropertySources{"EncryptionMethod"}]

    SInt32     EncryptionMethod;

    [PropertySources{"ConversionStatus"}]

    SInt32     ConversionStatus;

    [PropertySources{"ProtectionStatus"}]

    SInt32     ProtectionStatus;

    [PropertySources{"IsAutoUnlockEnabled"}]

    Boolean     IsAutoUnlockEnabled;

};


#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("Win32Reg_MBAMPolicy", NOFAIL)

 [DYNPROPS]

Class Win32Reg_MBAMPolicy

{

    [key]

    string KeyName;


    //General encryption requirements

    UInt32    OsDriveEncryption;

    UInt32    FixedDataDriveEncryption;

    UInt32    EncryptionMethod;


    //Required protectors properties

    UInt32    OsDriveProtector;

    UInt32    FixedDataDriveAutoUnlock;

    UInt32    FixedDataDrivePassphrase;


    //MBAM agent fields

    Uint32    MBAMPolicyEnforced;

    string    LastConsoleUser;

    datetime  UserExemptionDate;

    UInt32    MBAMMachineError;


    // Encoded computer name

    string    EncodedComputerName;

};


 [DYNPROPS]

Instance of Win32Reg_MBAMPolicy

{

    KeyName="BitLocker policy";


    //General encryption requirements


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|ShouldEncryptOsDrive"),Dynamic,Provider("RegPropProv")]

    OsDriveEncryption;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|ShouldEncryptFixedDataDrive"),Dynamic,Provider("RegPropProv")]

    FixedDataDriveEncryption;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE|EncryptionMethod"),Dynamic,Provider("RegPropProv")]

    EncryptionMethod;


    //Required protectors properties


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|OSVolumeProtectorPolicy"),Dynamic,Provider("RegPropProv")]

    OsDriveProtector;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|AutoUnlockFixedDataDrive"),Dynamic,Provider("RegPropProv")]

    FixedDataDriveAutoUnlock;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE|FDVPassphrase"),Dynamic,Provider("RegPropProv")]

    FixedDataDrivePassphrase;


    //MBAM agent fields


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|MBAMPolicyEnforced"),Dynamic,Provider("RegPropProv")]

    MBAMPolicyEnforced;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|LastConsoleUser"),Dynamic,Provider("RegPropProv")]

    LastConsoleUser;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|UserExemptionDate"),Dynamic,Provider("RegPropProv")]

    UserExemptionDate; //Registry value should be string in the format of yyyymmddHHMMSS.mmmmmmsUUU


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|MBAMMachineError"),Dynamic,Provider("RegPropProv")]

    MBAMMachineError;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|EncodedComputerName"),Dynamic,Provider("RegPropProv")]

    EncodedComputerName;

};


#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("Win32Reg_MBAMPolicy_64", NOFAIL)

[DYNPROPS]

Class Win32Reg_MBAMPolicy_64

{

    [key]

    string KeyName;


    //General encryption requirements

    UInt32    OsDriveEncryption;

    UInt32    FixedDataDriveEncryption;

    UInt32    EncryptionMethod;


    //Required protectors properties

    UInt32    OsDriveProtector;

    UInt32    FixedDataDriveAutoUnlock;

    UInt32    FixedDataDrivePassphrase;


    //MBAM agent fields

    Uint32    MBAMPolicyEnforced;

    string    LastConsoleUser;

    datetime  UserExemptionDate; //Registry value should be string in the format of yyyymmddHHMMSS.mmmmmmsUUU

    UInt32    MBAMMachineError;


    // Encoded computer name

    string    EncodedComputerName;

};


[DYNPROPS]

Instance of Win32Reg_MBAMPolicy_64

{

    KeyName="BitLocker policy";


    //General encryption requirements


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|ShouldEncryptOsDrive"),Dynamic,Provider("RegPropProv")]

    OsDriveEncryption;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|ShouldEncryptFixedDataDrive"),Dynamic,Provider("RegPropProv")]

    FixedDataDriveEncryption;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE|EncryptionMethod"),Dynamic,Provider("RegPropProv")]

    EncryptionMethod;


    //Required protectors properties


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|OSVolumeProtectorPolicy"),Dynamic,Provider("RegPropProv")]

    OsDriveProtector;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|AutoUnlockFixedDataDrive"),Dynamic,Provider("RegPropProv")]

    FixedDataDriveAutoUnlock;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE|FDVPassphrase"),Dynamic,Provider("RegPropProv")]

    FixedDataDrivePassphrase;


    //MBAM agent fields


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|MBAMPolicyEnforced"),Dynamic,Provider("RegPropProv")]

    MBAMPolicyEnforced;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|LastConsoleUser"),Dynamic,Provider("RegPropProv")]

    LastConsoleUser;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|UserExemptionDate"),Dynamic,Provider("RegPropProv")]

    UserExemptionDate; //Registry value should be string in the format of yyyymmddHHMMSS.mmmmmmsUUU

    [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|MBAMMachineError"),Dynamic,Provider("RegPropProv")]

    MBAMMachineError;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|EncodedComputerName"),Dynamic,Provider("RegPropProv")]

    EncodedComputerName;

};


#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("CCM_OperatingSystemExtended", NOFAIL)

[Union, ViewSources{"select Name,OperatingSystemSKU from Win32_OperatingSystem"}, ViewSpaces{"\\\\.\\root\\cimv2"},

dynamic,Provider("MS_VIEW_INSTANCE_PROVIDER")]

class CCM_OperatingSystemExtended

{

    [PropertySources{"Name"},key]

    string     Name;

    [PropertySources{"OperatingSystemSKU"}]

    uint32     SKU;

};


#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("CCM_ComputerSystemExtended", NOFAIL)

[Union, ViewSources{"select Name,PCSystemType from Win32_ComputerSystem"}, ViewSpaces{"\\\\.\\root\\cimv2"},

dynamic,Provider("MS_VIEW_INSTANCE_PROVIDER")]

class CCM_ComputerSystemExtended

{

    [PropertySources{"Name"},key]

    string     Name;

    [PropertySources{"PCSystemType"}]

    uint16     PCSystemType;

};


//=======================================================

// Microsoft BitLocker Administration and Monitoring end

//=======================================================

Vedere anche

Concetti

Distribuzione di MBAM con Configuration Manager

Altre risorse

Come creare o modificare i file MOF

-----
Per ulteriori informazioni su MDOP, è possibile accedere alla libreria TechNet, cercare contenuto sulla risoluzione di problemi in TechNet Wiki o tenersi informati tramite Facebook o Twitter.
-----

Condividi tramite