SCCM 1909 Technical Preview – MBAM – Improvements to BitLocker Management

This webcast provides a deep-dive and demo walk-through of SCCM 1909 MBAM Improvements to Bitlocker Management. This video reviews the newly released SCCM MBAM native features for SelfService and Helpdesk Web portals, WebInstaller PowerShell script and more.

Important Notes:

• MBAM SCCM Client Encryption testing REQUIRES the SCCM be running in PKI Native Mode. If you use a VM it will display the standard MBAM encryption required message but will fail the encryption. Use a physical PC to test MBAM client encryption.
• Critical: MBAM Core Service URL has changed to this example: serverdemo.mydemo.local/SMS_MP_MBAM/CoreService.svc
• Windows-Noob has a good article on how the MBAM client deployment with SCCM 1909 Technical Preview works once SCCM is running in full PKI “Native” mode linked here.
• After installing the MBAM WebInstaller using the Microsoft PowerShell script, you will experience a login popup message when trying to connect to the FQDN of the SelfService, Helpdesk and MBAM Core Services websites. Enable “NTLM” as top provider as shown here.

Click on the timecodes below to jump to a specific topic of this YouTube video.

1:27 Agenda

2:51 Requirements for SCCM MBAM

22:40 IMPORTANT NOTE: MBAM Client Validation Requires SCCM SSL Native Mode

5:26 Demo (Start)

6:58 MBAM Client Policy

9:14 Prerequisite Steps

10:14 MBAM WebSiteInstaller PowerShell Script

11:08 MBAM Active Directory Group Creation

13:07 MBAM SCCM Reports

15:01 Run MBAM PowerShell Script

16:22 Validate MBAM HelpDesk/SelfService Sites

18:46 MBAM Log File / Event Viewer Validation

26:28 IIS WebInstall Windows Authentication FQDN Known Issue

---

References:

Improvements to BitLocker management – Full Microsoft article on SCCM 1909 MBAM features.

ASP.NET MVC 4 – Prerequisite for the MBAM IIS WebInstaller PowerShell script.

On-premises BitLocker management using System Center Configuration Manager (MBAM client gotchas with TP 1905/1909)

How To Configure Microsoft SCCM to Use HTTPS/PKI – Great Microsoft document on how to setup PKI for SCCM.

---

Nathan (moderator) / September 30, 2019 / Filed Under: MBAM, SCCM, SCCM Technical Preview /