2 Intern

 • 

157 Posts

March 24th, 2021 15:00

Hi @iskyfly ,

From your notes the manage-bde -tpm -o command does need an additional argument according to MS documentation.  The value is    and should be the password you wish to set on the TPM for Windows to take ownership of it. Example command: manage-bde -tpm -takeownership 0wnerP@ss

With that additional value the TPM should now be owned by Windows and Bitlocker should now be able to leverage the TPM for its cryptographic functions.  You may need to add the -protectors -add tpm and -protectors -add -recoverypassword to set the protectors on the machine.

It looks like your Altiris script is attempting to do the same thing as manage-bde -tpm -o but something must not be registering correctly.  

No Events found!

Top