Windows 10: Bitlocker Over Network - UEFI DHCP IP

I am trying to configure BitLocker over Network. I have a WDS on one server and DHCP on another server. My Switch is configure with IP Helper to DHCP IP. I followed Microsoft BitLocker over Network requirements. My issue is that I do not think I am getting an IP in UEFI mode. I did some test to boot the client in PXE with Legacy and I see the client get an IP from the DHCP server. When I change the client BIOS to UEFI, I do not see the client get an IP. I ran Wireshark to filter port 67 and 68. I see the request going back and forth from client switch to DHCP server DISCOVER, OFFER, REQUEST,

:)

 

Bitlocker Network Unlock - DHCP/PXE Question

We are rolling out Network Unlock for Bitlocker on Win10 Enterprise machines.

Clients are on VLAN1

DHCP Server is on VLAN10

WDS Server is on VLAN10

WDS and DHCP are on different servers.

Everything looks correct. Clients are getting the Certificate from GPO. Subnet BDE file has been created.

Clients are UEFI and correct - protectors TPMandPIN have been installed.

From WDS we can verify the cert in the cert store "certutil.exe -verifystore FVENKP"

From client we can verify the cert and protectors "manage-bde -protectors -get C:"

Our switching fabric uses IP helpers for DHCP which is working correctly.

But we still get the prompt for PIN.

I have enabled Debug logging for WDS Server. I am getting an error,

[WDSServer] [base\eco\wds\wdsmgmt\src\wdsdirectoryservicesusepolicy.cpp:306] Expression: , Win32 Error=0x2

Have not found what this error means.

Do I need to configure anything on DHCP server clients to communicate w. WDS server during boot to bypass PIN?

or

Do I need to configure anything on WDS server for DHCP?

Client can communicate w/ DHCP and WDS server -> network access is good.

From MS Docs on Bitlocker Network Unlock. I am assuming the issues is on phase 3&4 of the unlock process.

Any help on troubleshooting to ID the issue would be appreciated.

Thanks,

 

DHCP on a static IP Network

Hi Jo,

Some types of servers need a designated IP address and subnet mask upon setup, which includes DHCP servers, DNS servers, or any other server that provides access to the Internet. If you are connected to a domain, then we suggest referring to this article
we've found from our TechNet forum on
how to configure DHCP server static IP address.

If you still need further assistance, you can also post directly here on our
Microsoft TechNet Windows 10 Networking Forum so our IT Professional can give additional solutions to help resolve the
issue.

Let us know if you need anything else. We're here to help.

 

Finding IP address

Hello,

Thank you for writing to Microsoft Community Forums.

I suggest you to follow the steps mentioned below to find printer’s IP address:

1. Type Devices and Printers in the Windows search bar.
   
2. Select on the printer and click on
   Manage.
   
3. Click on the Ports tab.
   You will be able to find printer’s IP address under the ‘Ports’ tab.
   

Few printers also have a “Test print” option on the printer. When you print a test page from network printer, the page shows the IP address along with other details.

Note: If it is set on DHCP mode the IP address will constantly change.
The IP address is assigned automatically by your router using a protocol called DHCP.

Hope it helps.

Sandeep Kumar M

Microsoft Community – Moderator