This webcast provides a deep-dive and demo walk-through of SCCM 1909 MBAM Improvements to Bitlocker Management. This video reviews the newly released SCCM MBAM native features for SelfService and Helpdesk Web portals, WebInstaller PowerShell script and more.
Important Notes:
- MBAM SCCM Client Encryption testing REQUIRES the SCCM be running in PKI Native Mode. If you use a VM it will display the standard MBAM encryption required message but will fail the encryption. Use a physical PC to test MBAM client encryption.
- Critical: MBAM Core Service URL has changed to this example: serverdemo.mydemo.local/SMS_MP_MBAM/CoreService.svc
- Windows-Noob has a good article on how the MBAM client deployment with SCCM 1909 Technical Preview works once SCCM is running in full PKI “Native” mode linked here.
- After installing the MBAM WebInstaller using the Microsoft PowerShell script, you will experience a login popup message when trying to connect to the FQDN of the SelfService, Helpdesk and MBAM Core Services websites. Enable “NTLM” as top provider as shown here.


Click on the timecodes below to jump to a specific topic of this YouTube video.
1:27 Agenda
2:51 Requirements for SCCM MBAM
22:40 IMPORTANT NOTE: MBAM Client Validation Requires SCCM SSL Native Mode
5:26 Demo (Start)
6:58 MBAM Client Policy
9:14 Prerequisite Steps
10:14 MBAM WebSiteInstaller PowerShell Script
11:08 MBAM Active Directory Group Creation
13:07 MBAM SCCM Reports
15:01 Run MBAM PowerShell Script
16:22 Validate MBAM HelpDesk/SelfService Sites
18:46 MBAM Log File / Event Viewer Validation
26:28 IIS WebInstall Windows Authentication FQDN Known Issue
References:
Improvements to BitLocker management – Full Microsoft article on SCCM 1909 MBAM features.
ASP.NET MVC 4 – Prerequisite for the MBAM IIS WebInstaller PowerShell script.
On-premises BitLocker management using System Center Configuration Manager (MBAM client gotchas with TP 1905/1909)
How To Configure Microsoft SCCM to Use HTTPS/PKI – Great Microsoft document on how to setup PKI for SCCM.
Filed Under: MBAM, SCCM, SCCM Technical Preview /
/ /