...
This is just a quickly thrown together entry to get some documentation out there.
The BitLocker Recovery tool is a hardware based utility used to prevent computer theft. Apparently research has shown that if a computer is stolen, it often experiences some sort of physical shock in the process. So the BitLocker Recovery Tool is basically a 'jostle' sensor, when tripped, it locks the computer. It can only be turned back on by use of a recovery key obtained from Active Directory.
Unfortunately, we get a lot of false positives on these sensors.
Confirm that the user is associated with Purdue.
First and foremost, get them a recovery key over the phone, see KB 1140849
Second, if Microsoft encryption product designed to protect the user data on a system. In the event of a problem with BitLocker, a user may encounter a prompt for a BitLocker recovery key.
Windows device encryption is a security feature in Microsoft Windows that helps protect your data by encrypting the system drive. If device encryption is enabled, only authorized individuals will be able to access your device and data.
NOTE: Because BitLocker is an encryption security product, Dell neither stores nor has the ability to provide a recovery key. Dell cannot circumvent the Microsoft BitLocker Recovery key process. Dell devices are not encrypted when shipped from the factory.
NOTE: If the sensor is getting tripped repeatedly, you may need to hard power-cycle the machine. This can be accomplished by
...
Power-Cycling
- Ensure the machine has been fully shut down.
Desktops:
- Remove the power cable from the back of the machine.
- Press and hold the power button for at least 15 seconds to discharge any stored electricity.
- Plug the power cable back in and start the machine up again
...
- .
- Verify with the user that the machine boots past the system logo.
Laptops:
- Remove the laptop from the dock, or disconnect the dock cable from the laptop if applicable.
- Remove the power cable from the dock
...
- .
- Wait 30 seconds to a minute.
- Press and hold down the power button for at least 30 seconds to discharge any stored electricity.(Do this even if it powers on mid hold)
- Boot up the machine again. Press and hold the power button on the laptop for 30 seconds again.
- Verify with the user that the machine boots past the system logo.
- Restart to make sure Bitlocker doesn't return
NOTE: If the computer doesn't accept the BitLocker key, or is repeatedly asking for the a BitLocker key, even after following the steps above, the ticket should be escalated to CSDS Support._SUPPORT.
Panel | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||
Open a web browser and go to Dell Active Roles located at https://ars.boilerad.purdue.edu/ARServerAdmin/. Sign in using your BoilerAD OUAdmin account. NOTE: If you do not know your BoilerAD OUAdmin account username or password, please email accounts@purdue.edu.
Once properly logged in with your OU admin account, the top right corner should look like the following: Once logged in, search for the given machine's name. NOTE: Make sure it is a BoilerAD machine. Its name will start with “CSDS” instead of “1074”. Check the box of the machine on the list that matches the machine name provided by the user. This will open a new column. From here, click on “BitLocker Recovery”. Click on the password ID that matches the one that the user sees on their screen and provide the user the 48-character Recovery Password. After a BitLocker key has been provided, it is best practice to restart the BitLocker encryption service using the following steps: Suspending BitLocker Protection
Resuming BitLocker Protection
|
Anchor suspendbitlocker suspendbitlocker
suspendbitlocker | |
suspendbitlocker |
Panel | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|
| ||||||||||
Follow directions in KB# 1140849 to GET the Bitlocker key for CSDS-##### 'named' machines (means they're on the BoilerAD domain) CSDS says we MIGHT be able to skip straight to step 'B' How to Suspend BitLocker
|
Panel | ||||||||
---|---|---|---|---|---|---|---|---|
| ||||||||
Category End-point Computing Service Software Service Offering Managed Software Owner Group ITAP_CSDS_SUPPORT |