802.1x Authentication for Bitlocker Network Unlock

I have Windows 7 clients that have the disk encrypted with Bitlocker. They are all using TPM + PIN as protectors. Software distribution at night time is a pain because WOL does not work.

When we migrate to Windows 10 we could use Network Unlock to wake up these devices. But because we use 802.1x with a certificate for network port authentication I am not sure if that will work.

Has anybody successfully copied a certificate to the TPM and used that for network authentication before Windows starts? Or even some experience in using this setup? (Bitlocker with PIN, Netowork unlock and 802.1x)

August 6th, 2015 12:14pm

Hi JackAB,

I am afraid it is not available to configure the Bitlock network unlock feature with wireless connection. We could get the information from the link you have posted.

Network Unlock enables easier management for BitLocker enabled desktops and servers in a domain environment by providing automatic unlock of operating system volumes at system reboot when connected to a wired corporate network. This feature requires the client hardware to have a DHCP driver implemented in its UEFI firmware.

Best regards

Free Windows Admin Tool Kit Click here and download it now
August 7th, 2015 2:56am

Hi MeipoXu,

The Connection is wired but uses 802.1x as an additional security barrier. The client will not receive a IP from DHCP until the connection has been authenticated with a certificate.

August 7th, 2015 3:34am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics