Bitlocker no TPM chips backing up to AD

[nicholab]

Is it possible if using windows 8.1 to use either an eDrive or standard HDD without a TPM and store the recovery keys in AD?

[Sam_Brown]

Is it possible if using windows 8.1 to use either an eDrive or standard HDD without a TPM and store the recovery keys in AD?

 

You can change a setting in group policy to enable it to encrypt without a TPM.

 

Edge Pereira's Blog: How to Enable Bitlocker for Windows 8 without TPM

 

It is possible to save the recovery keys to AD. We do this when encrypting ours. Although we do ours as part of a SCCM Task Sequence so not sure how you'd go about configuring it yourself.

 

This might help:

 

Group Policy Settings for BitLocker Save to AD | Windows 8 content from Windows IT Pro