/bundles/itninjaweb/img/Breadcrumb_cap_w.png

How to use k1000 to disable and enable bitlocker for bios updates?

    Vivalo
    Senior Yellow Belt
  • Rating:
  • Average Rating: 0
  • 01/17/2018
  • 1012 views
Pretty much it’s all in the title. 

I see people made a script to do it, but how? 
0 Comments   [ + ] Show comments

Comments

Community Chosen Answer

2
Microsoft has a script to suspend bitlocker
https://gallery.technet.microsoft.com/scriptcenter/Suspend-Bitlocker-and-0e3d43c0

You may want to deploy it via Scripting with the KACE agent.

You might want to register, post and vote here:
https://kace.uservoice.com/forums/82699-sma-k1000/suggestions/17526076-suspend-bitlocker-as-part-of-the-patch-detect-de

The KACE agent can also push Powershell scripts, see Method 3 here:
http://www.isumsoft.com/windows-10/enable-suspend-or-resume-bitlocker-protect-for-drive.html
Answered 01/17/2018 by: Channeler
Tenth Degree Black Belt

  • Hi channeler.

    I did not mention that I have already tried using a batch script and PowerShell script using the commands that MS provide to manage BitLocker.

    If I run the batch file or PowerShell script manually on a PC, it works. When done with Kace it doesn’t.

    Is there anyone there that has actually done this with KACE?
    • Have you tried the Second Method described here:
      https://support.quest.com/kace-systems-management-appliance/kb/138389

      That is the one I use.
      • The second method works fine for all my other PowerShell scripts. Tried method 1 and it works for this one. I guess the way that method 1 works, PowerShell is able to use the BitLocker module.

All Answers

0
manage-bde can do this. Really simple to script.



I use sysnative because the K1000 Agent is 32-bit so sysnative redirects to the correct system directory.

To reenable, change '-disable' to '-enable'. 
Answered 01/26/2018 by: tshupp
Second Degree Black Belt