Server 2012 Bitlocker Require additional authentication Win 7 Family

[Theldron]

Hi all,

 

Trying to finish getting bitlocker setup for our laptops. We are Win7 Enterprise desktops/laptops with a mix of 2008r2 and 2012r2 servers.

 

Majority of our hardware will not have TPM chips built in, but I do not see the point in using USB keys to unlock laptops as can guaratee staff will keep the USB keys with the laptop and if they are stolen defeats the object. So would like to setup startup PIN. I realise that this will not work with Windows 7 or Server 2008r2.

 

Our netbooks are Windows 8.1 so wanted to test with them, but when I log into the 2012 server and go to GPME on the option "Require Additional Authentication at Startup" it only give Windows 7 family as support on, not at least Server 2008 and Windows 7 as expected. Is this because we have a mix of Server OSs or is there a update I need to install?

 

Any help would be appreciated.

[KevinB]

You might need to update your group policy templates since if I look at that setting on a 2012 R2 DC it says "At least Windows Server 2008 R2 or Windows 7"

[Theldron]

Thanks mate, hadn't seen the 8.1 templates update. Installed all working now. Cheers

[KevinB]

You're welcome