Hello, we want use MBAM in our company. Currently I still testing a lot of things mainly recovery scenarios. Today maybe I dig out a problem. I boot a client with Windows 7 enterprise DVD and try to use key package to get access. I save right keyfile to an usb stick, click refresh and got a message, no key package found? Filename was 65e1eea8.KeyPackage, is there any special or what did I wrong? Best regards speerle

keypackage is used only with repair-bde command. if your machine goes in recovery mode then use 48 digit recovery password. Repair-bde.exe Parameter Reference http://technet.microsoft.com/en-us/library/ee706528(WS.10).aspx Scenario 16: Using the BitLocker Repair Tool to Recover a Drive http://technet.microsoft.com/en-us/library/ee523219(WS.10).aspxManoj Sehgal

inspite of copying the key file to USB, copy the recovery key and make the machine boot with that. else get the recovery password from the MBAM console.Gaurav Ranjan

Hi, I use key packages with mange-bde and it works fine. I don´t know why Windows 7 boot-cd offers recovery mode with recovery key or key package? In my opinion it makes no sense when access with key packages always fail. I think handling this is much easier as typing a recovery key. I have another question about recovery. I only use TPM with MBAM. For example, an user shrink os partition and reboot his machine. After a reboot it stops in Bitlocker revocery mode. When the user type correct recovery key and Windows will boot fine, what has he to do now. Currenty I disable an enable Bitlocker for the whole partition(s). Is there a smoother way?

if you are using MBAM with TPM, MBAM takes the ownership information and generates a ID for the TPM. that ID is used while booting to log in the machine by passing the recovery mode. i think your machine should not enter the recovery mode if you have only using the TPM with MBAM(without any PIN or startup key). Can you please clear out your issue a bit more.Gaurav Ranjan