If the machine does not support enhanced PINs in a preboot environment, this settings does not work.īitLocker Authentication Settings: Use Password if TPM Not Present Users can set uppercase and lowercase letters, use symbols, numbers, and spaces. Select this check box to allow users to set PINs with more than numbers. This PIN is numeric unless otherwise configured with Allow Enhanced PIN at Startup.īitLocker Authentication Settings: Allow Enhanced PIN at Startup Select this setting to configure a specific length for the PIN at startup. This option locks out the OS start up and auto-resume from suspend or hibernate until the user enters the correct PIN.īitLocker Authentication Settings: PIN Length Select the check box to require users to enter a PIN to unlock the device.
After 30 days, the system may be unrecoverable.īitLocker Authentication Settings: Authentication Mode If this you enable this setting and wipe a device, you can only access the recovery from the Workspace ONE UEM console for 30 days. Use this option to ensure that device wipes, profile removals, or break in communication with Workspace ONE UEM does not decrypt the device. This enforcement means that the device immediately re-encrypts if BitLocker is manually disabled.Ĭonsider disabling this setting to prevent issues during upgrades or Enterprise Wipes.Įnable this option to keep the device encrypted at all times. Only Encrypt Used Space During Initial EncryptionĮnable to limit the BitLocker encryption to only the used space on the drive at the time of encryption.Įnter the URL to display on the lock screen directing end users to get the recovery key.Ĭonsider entering the Self Service Portal URL as Workspace ONE UEM hosts the recovery key there.Įnable to force encryption on the device. This setting applies the default encryption algorithm. Select this check box if your OEM specifies a default encryption method for a given type of device. Select the encryption method for the device. System Partition – Encrypts a partition or drive in the same location Windows is installed and from which it boots.All Fixed Hard Disks – Encrypts the entire hard disk on the device, including the System Partition where the OS is installed.Use the drop-down menu to select the type of encryption as follows:
Select the Encryption profile and configure the settings: Settings.Configure the profile General settings.Select Windows and then select Windows Desktop.Navigate to Resources > Profiles & Baselines > Profiles > Add and select Add Profile.
0 kommentar(er)
