Hi, Based on my research, Im afraid that a special password is required. See, manage-bde tpm Syntax. In addition, if you would like to save the password in AD, please check if you can use Microsoft BitLocker Administration and Monitoring. More information: Microsoft Desktop Optimization Pack Hope this helps. Jeremy Wu TechNet Community Support

Hi folks, I am trying to enable Bitlocker via the command line to have a package for our software deployment. I stuck at the point where it comes to the TPM`s ownership. AFAIK it is possible to take the ownership with manage-bde -tpm -o. But it seems that you have to define a password at this point. Is it possible to generate a random password with another parameter/option, or something that leads me to take the ownership and backup the password in the AD (forced by GPO)?

Hi Jeremy_Wu, thank you for your reply! I was hoping for a "special" tpm parameter to handle the ownership. A GPO for BitLocker is already setup but your link is pretty interesting. Many thanks for that!

Hi, Based on my research, Im afraid that a special password is required. See, manage-bde tpm Syntax. In addition, if you would like to save the password in AD, please check if you can use Microsoft BitLocker Administration and Monitoring. More information: Microsoft Desktop Optimization Pack Hope this helps. Jeremy Wu TechNet Community Support

Hi Jeremy_Wu, thank you for your reply! I was hoping for a "special" tpm parameter to handle the ownership. A GPO for BitLocker is already setup but your link is pretty interesting. Many thanks for that!

Hi, Thanks for the reply. However, I'm afraid that there is no special TPM parameter. Thanks. Jeremy Wu TechNet Community Support