BitLocker with Single Sign On (SSO)
Right now we are using BitLocker with Active Directory integration. Means all recovery keys stored in Active Directory using group policy.
Our most of the users tired because of two inputs while login, means 1st is BitLocker PIN and 2nd is Windows Domain Login.
Now we want to deploy BitLocker with Single Sign On (SSO).
Although SSO Encryption bundled with most of the Enterprise Antiviruses, but definitely we need to purchase licenses.
I need step by step configuration of “BitLocker with Single Sign On (SSO)” with AD integration.
Is this free from Microsoft?
What about MBAM?
Early reply will be highly appreciable.
Our most of the users tired because of two inputs while login, means 1st is BitLocker PIN and 2nd is Windows Domain Login.
Now we want to deploy BitLocker with Single Sign On (SSO).
Although SSO Encryption bundled with most of the Enterprise Antiviruses, but definitely we need to purchase licenses.
I need step by step configuration of “BitLocker with Single Sign On (SSO)” with AD integration.
Is this free from Microsoft?
What about MBAM?
Early reply will be highly appreciable.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ste5an
Here's a good talk about SSO and Bitlocker: Single Sign On (SSO) with BitLocker and Common Myths about Pre-Boot Authentication Attacks
ste5an, does it show sso? I don't think so. It will show that you don't need sso when you have win8/10 and server 2012/2016 and use network unlock, right?
No, it just good background info..
About what, SSO? Because there is no SSO for bitlocker.
Thing is, network unlock is wonderful, but only for those who have the right (modern) hardware and software to use it. And still, there's the lack of preboot authentication - I go to your PC, turn it on while you are not in the office - network unlock happens, the key is in RAM. I turn off your pc and run a coldboot attack - thanks for your key.
Thing is, network unlock is wonderful, but only for those who have the right (modern) hardware and software to use it. And still, there's the lack of preboot authentication - I go to your PC, turn it on while you are not in the office - network unlock happens, the key is in RAM. I turn off your pc and run a coldboot attack - thanks for your key.
tranzum, you never gave feedback - is "project bitlocker sso" still alive?
ASKER
Closed with thanks