SOLVED Windows 11 Bitlocker issues

[ITSupport]

Hi all,
We have just built a new SCCM server as our previous one was dying a slow death being unable to update the version that was already installed on there and having other silly errors to go with it.

We have the new SCCM server ready to go, with a small number of apps, and at the moment only 1 task sequence for deploying the OS. The issue we now have is that our previous server had a task sequence that we could use to configure and enable Bitlocker. We have tried migrating the previous task sequence to the new server, we have created a new task sequence step-by-step and just can't get it working.

The task sequence runs, hits the enabling Bitlocker phase and runs through the process, but then the machine restarts and nope no BL working on the machine.

Just in case any relevance:
Old SCCM boot version: 10.0.22621.1
New SCCM boot version: 10.0.26100.1

Can anyone throw any suggestions our way please?
TIA a rapidly balding IT guy!

 

[Garth]

Hi all,
We have just built a new SCCM server as our previous one was dying a slow death being unable to update the version that was already installed on there and having other silly errors to go with it.

We have the new SCCM server ready to go, with a small number of apps, and at the moment only 1 task sequence for deploying the OS. The issue we now have is that our previous server had a task sequence that we could use to configure and enable Bitlocker. We have tried migrating the previous task sequence to the new server, we have created a new task sequence step-by-step and just can't get it working.

The task sequence runs, hits the enabling Bitlocker phase and runs through the process, but then the machine restarts and nope no BL working on the machine.

Just in case any relevance:
Old SCCM boot version: 10.0.22621.1
New SCCM boot version: 10.0.26100.1

Can anyone throw any suggestions our way please?
TIA a rapidly balding IT guy!

What does the logs and event viewer say is happening?

 

[ITSupport]

What does the logs and event viewer say is happening?

Hi Garth,
Made a discovery which is why I have taken a while to come back to you.

We have the TS set up with a 'pre-provision' BitLocker command. If we let the machine run the TS with no interaction it appears that the pre-provision isn't getting to 100% of encrypting the disk and the TS continues to run. When it then hits the 'enable BL' command it sits there for a while making it look like it's working but does not enable BL.

If we run the F8 CMD Prompt, run 'manage-bde -status' until it gets to 100% and close the CMD prompt down, machine restarts completes the TS and fully enables BL.

Leading on from this, my next question - is there a way that we would be able to implement some sort of looping script that keeps checking until the status changes from 'Encryption in progress' and once complete can allow the machine to restart.

Either that or is there a way of automating the F8 CMD prompt being opened, the TS Variable being updated and when updated closing the CMD prompt which gets the machine to auto restart and continue on with the process?

 

[ITSupport]

Sorry all - appears that the issue has gone away now!
We rearranged the order of certain things in the TS and all is working well - has been tested on newly deployed kit and previously working kit.