SCCM v2103 Enhanced HTTP with BitLocker Management

[blop]

Thanks for the answer.

The clients are on the 5.00.9049.1010 version which is pretty recent if I'm correct

[anyweb]

i mean, do the client versions correspond to the site version, if yes then let's figure out if the client is getting the policy or not,

did you check on the configmgr client agent to see if the bitlocker policy you configured is listed ?

[blop]

Yes, they match. The client version is corresponding to the 2103 sccm version. I see it appearing in the configurations tab on the CCM client. It appears as non compliant until I trigger the encryption manually. I tried to reboot several times but the MBAMclientUI.exe never appears.

I tried to do a cmd ->

bdehdcfg -driveinfo

and it tells me that everything is ok. When I do a get-tpm with Powershell, everyting is on True and seems fine even when I launch the tpm.msc everyting is good.

I also tried to reset the TPM just in case, still no luck.

[anyweb]

ok if the mbam client is not getting installed then there's something wrong with your policy settings, are you sure you've configured Client Management and set it to Enabled ?

[blop]

In fact the MBAM client is installed but it doesn't show the wizard asking the user to encrypt its device neither force him too. The only way to encrypt the device is to open a cmd with administrator rights and type manage-bde -on c : or do it trough the control panel.

Thanks.

[anyweb]

show me screenshots of your configured settings, something is not right

[blop]

Hello,

On the first tab:

Nothing else is configured under.

Second tab:

Third tab:

Nothing else is configured on the two last tabs.

I tried to do exactly the same configuration on a lab with https on the management point and it works as intended. I'm starting to believe that it does not play well with http enhanced.

Thanks!

Edited August 31, 2021 by blop

[anyweb]

good info, can you show me your Configurations tab in the configmgr client agent...

[blop]

There you go :

[anyweb]

and what does it report when you evaluate the compliance of that configuration ?