Managing BitLocker Infrastructure

A new tool, BitLocker Administration and Monitoring (BAM), has been added to version 2011 R2 of the Desktop Optimization Pack (DOP, also known as MDOP) in Aug. 2011. Used with BitLocker, Microsoft’s full disk encryption product, BAM simplifies deployment, key recovery, monitoring, and reporting of encryption status for fixed and removable drives. Customers get a tool that enables policy enforcement and reporting for full disk encryption on PCs across an enterprise. However, other components, such as a Group Policy management tool and SQL Server, are required for compliance reporting. BAM is only available for customers who have Software Assurance (SA) on the Windows client OS or who subscribe to Windows Intune.

Managing Full Disk Encryption

BitLocker Drive Encryption, introduced with Windows Vista, reduces the threat of data theft or exposure from lost, stolen, or recycled computers. (See the sidebar “BitLocker Explained“.)

BAM performs several functions:

• Uses Group Policy to enforce