topic Re: Bitlocker Recovery Key in Endpoint

Bitlocker Recovery Key

Saul_Goodman — Wed, 13 Apr 2022 04:05:14 GMT

Hi Checkmates,

Im having a hard time using Harmony Endpoint FDE Bitlocker Management Recovery Key

I have a windows with unmanaged Bitlocker then i installed Harmony Endpoint agent with FDE Bitlocker.

Im doing test using Recovery Key and the challenge comes out.

In the Bitlocker Recovery Documentation below:

Go to Computer Management > Full Disk Encryption Actions > Recovery > BitLocker Recovery
The BitLocker Management Recovery window opens.
Enter the Computer's Recovery Key ID of the client. The Recovery Key ID is a string of numbers and letters that looks like this:
C9F38106-9E7C-46AE-8E88-E53948F11776
After you type a few characters, the Recovery Key ID fills automatically.

The challenge here is i never knew what the Recovery Key ID is nor the first few characters.

When i go to the Bitlocker Management on Windows control panel it seems the Bitlocker Management Window are not accessible anymore i think it is because of the Harmony Endpoint FDE blade.

What are the right steps when deploying FDE Bitlocker Management?

Do i need to export all Recovery Keys from the Endpoint prior to installation of Harmony Endpoint FDE?

If yes what if there are a lot of endpoints with unmanaged Bitlocker?

Re: Bitlocker Recovery Key

_Val_ — Wed, 13 Apr 2022 06:46:07 GMT

When you say " unmanaged", what do you mean, a standalone installation? Which versions of Bitlocker and Harmony are in use?

Re: Bitlocker Recovery Key

jcortez — Tue, 19 Apr 2022 00:08:58 GMT

@Saul_Goodman

The expectation here is that you have a Windows machine at the blue BitLocker Recovery screen. There is a Key ID provided there. The procedure you are giving is not how the product is intended to be used.

And as @_Val_ asked, what do you mean by unmanaged? If you have our client installed with our BitLocker NEM (Native Encryption Management) Policy assigned using our FDE Blade then it is no longer "unmanaged" but managed by a 3rd Party, in this case Check Point Harmony Endpoint.

Please expand.

Re: Bitlocker Recovery Key

Saul_Goodman — Tue, 19 Apr 2022 00:22:37 GMT

HI Val,

by unmanaged i mean the bitlocker of windows is not centrally managed by bitlocker itself or any third party management but is now being managed by Check Point FDE

The Harmony Agent installed is 86.25.5060

The Harmony Endpoint Management as a Service Version is 81.10.9.73

Version if bitlocker from "manage-bde -status" is Configuration Tool version 10.0.22000 (Not sure if im right)

Re: Bitlocker Recovery Key

Saul_Goodman — Tue, 19 Apr 2022 00:25:56 GMT

Hi Justin

How do i access the "blue BitLocker Recovery screen"?

Re: Bitlocker Recovery Key

jcortez — Tue, 19 Apr 2022 00:53:48 GMT

@Saul_Goodman

That is a Windows question. By doing a quick Google search I was able to find this...

https://docs.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan