SCCM 2012

One of Directions Training’s Microsoft Technical training experts wanted you to know…

In a recent Microsoft SCCM 2012 delivery, I was asked about installation of software on clients configured to use BitLocker.

The student was concerned about pushing software to client machines that require a BitLocker PIN entry on startup.

To that end, there is an option in the Client Settings that can be used to disable the BitLocker PIN requirement during software installations requiring a system reboot.

The BitLocker PIN entry option can bypass the requirement to enter a PIN when the computer restarts after a Configuration Manager initiated software installation.

To configure this setting, on the SCCM 2012 console, open the Administration category.  Select Client Settings, Properties from the ribbon.  Select Computer Agent, and scroll down to the Suspend BitLocker PIN entry on restart option. From the drop down list select Never or Always.

The option you select will provide the following condition:

Always: Configuration Manager temporarily suspends the BitLocker requirement to enter a PIN on the next computer startup after it has installed software that requires a restart and initiated a restart of the computer. This setting applies only to computer restarts that are initiated by Configuration Manager and does not suspend the requirement to enter the BitLocker PIN when the user restarts the computer. The BitLocker PIN entry requirement is resumed after Windows startup.

Never: Configuration Manager does not suspend the BitLocker requirement to enter a PIN on the next computer startup after it has installed software that requires a restart. In this scenario, the software installation cannot finish until the user enters the PIN to complete the standard startup process and load Windows.

For more Microsoft Technical Training information visit www.directionstraining.com or call 1-855-575-8900.