JumpCloud BitLocker Policy Can Optionally Encrypt All Drives
Hi Folks!
I’m posting to let you know that JumpCloud has updated the Windows BitLocker Policy with an optional setting to Encrypt All Drives, giving you increased security and compliance for devices that have multiple drives.
Previously only the System Drive - typically the C:\ drive was the only encrypted drive.
Use Cases & Behavior
- Devices that are not yet encrypted
- Configure, Save, and Bind the policy.
- BitLocker will encrypt the other drives.
- Recovery keys will be issued and escrowed in JumpCloud.
- Devices already encrypted with a JumpCloud BitLocker Policy.
- Update the configuration of the existing policy, Save it.
- BitLocker will encrypt the other drives.
- Recovery keys will be issued and escrowed in JumpCloud.
- Devices encrypted with a manual or non JumpCloud policy based method.
- If the other method is policy based: be sure to unbind that policy from the device in order to avoid a policy conflict in BitLocker.
- Configure, Save, and Bind the JumpCloud BitLocker policy.
- If applicable, BitLocker will encrypt drives that are not encrypted.
- Recovery keys will be re-issued and escrowed in JumpCloud
