Hi all

We're running SCCM 2012 R2 CU4. All gone well with our global migration to Windows 7 Enterprise with BitLocker using our SCCM task sequence.

2 offices remain: Beijing and Shanghai. However, Chinese regulations do not permit the use of TPM chips, in fact, all laptops we buy locally have the TPM chip disabled permanently at manufacturing. So we have been trying to create task sequence that enables BitLocker using a Startup (USB) key instead of the TPM but we're getting a task sequence error 0x80004005 during the "Enable BitLocker" step. This is proving to be more difficult than anticipated.

Can anyone offer an assistance or a link to a guide that walks us through the process for Enabling BitLocker using a Startup key in the absence of a TPM chip please?

Best regards
Scott

Have a look at these articles;

http://windows.microsoft.com/en-au/windows7/learn-more-about-bitlocker-drive-encryption

https://it.ucsf.edu/how_do/how-encrypt-using-windows-bitlocker

http://www.howtogeek.com/howto/6229/how-to-use-bitlocker-on-drives-without-tpm/