Windows 10: Bitlocker Network Unlock - DHCP/PXE Question

We are rolling out Network Unlock for Bitlocker on Win10 Enterprise machines.


Clients are on VLAN1

DHCP Server is on VLAN10

WDS Server is on VLAN10


WDS and DHCP are on different servers.


Everything looks correct. Clients are getting the Certificate from GPO. Subnet BDE file has been created.

Clients are UEFI and correct - protectors TPMandPIN have been installed.


From WDS we can verify the cert in the cert store "certutil.exe -verifystore FVENKP"

From client we can verify the cert and protectors "manage-bde -protectors -get C:"


Our switching fabric uses IP helpers for DHCP which is working correctly.


But we still get the prompt for PIN.


I have enabled Debug logging for WDS Server. I am getting an error,

[WDSServer] [base\eco\wds\wdsmgmt\src\wdsdirectoryservicesusepolicy.cpp:306] Expression: , Win32 Error=0x2


Have not found what this error means.


Do I need to configure anything on DHCP server clients to communicate w. WDS server during boot to bypass PIN?

or

Do I need to configure anything on WDS server for DHCP?


Client can communicate w/ DHCP and WDS server -> network access is good.


From MS Docs on Bitlocker Network Unlock. I am assuming the issues is on phase 3&4 of the unlock process.


Any help on troubleshooting to ID the issue would be appreciated.


Thanks,

SJMP

:)

 

BitLocker key cannot unlock the disk. Neither can i reinstall cause the drive is blocked

Hi Havard,

Thank you for posting your query in Microsoft Community.

I understand the inconvenience you are facing currently.

I would appreciate if you can provide us the following information to help us understand the issue better.

• Did you try to unlock the drive using the Bitlocker application in Windows 10?
  
• If yes, did you get any error message while trying that?

I suggest you to follow the methods below and check if that helps:

Method 1:

I would suggest you to try unlocking the drive using the Bitlocker facility available in Windows 10 and check if you are able to unlock it successfully. If you are getting any error message with says “Application not found”, then I would suggest you
to refer the article provided in the link below:

http://windows.microsoft.com/en-US/windows-8/unlock-bitlocker-protected-drive

Method 2:

I would suggest that you try the steps mentioned in the link below and check if it helps resolve your issue.

Important: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For
added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following link to view the article “How to back up and restore
the registry in Windows” from the Microsoft Knowledge Base:

https://support.microsoft.com/en-us/kb/322756

(Applies to Windows 10)

For more information regarding BitLocker, you may refer the article "BitLocker Frequently Asked Questions (FAQ)" from this link:

http://technet.microsoft.com/en-us/library/hh831507.aspx

Hope the information helps. Please let us know if the issue persist and we will be happy to assist you further.

 

My question is about bitlocker.

Hi,

To address your concern, You can try unlocking the hard drives through the elevated command prompt by following the steps below.

Unlock Drive using a Password

• Open command prompt as administrator.
• Type the commands below. You will not be able to see the password while typing it in.

manage-bde -unlock D: -password (for the D drive)

manage-bde -unlock F: -password (for the F drive)

3. Hit Enter key after typing in each command.

Unlock Drive using the Bitlocker Recovery Key

• Open command prompt as administrator.
• Type the commands below.

manage-bde -unlock D: -rp BitLocker Recovery Key (for the D drive)

manage-bde -unlock F: -rp BitLocker Recovery Key (for the F drive)

3. Hit Enter key after typing in each command.

Let us know how it goes.

Regards.

 

BitLocker Network Unlock Surface Pro 4

Hi Simon,

What Windows 10 edition does your Surface Pro 4 on? Basically, Bitlocker is available on Windows 10 Pro, Enterprise, and Education editions. To learn more on how to enable Network Unlock in Windows 10, please check out this
link.

In case you need further assistance, we suggest that you post it in Microsoft TechNet as this matter is best handled by their
level of support and expertise.

Regards.