
Administration and Monitoring web site: allows other roles in your organization (for example Help Desk) outside of the Configuration Manager console to help with key recovery, including key rotation and other BitLocker-related support.Manage BitLocker policies and escrow recovery keys for on-premises and Internet-based clients (Internet-based clients requires version 2010).Deploy the BitLocker client to managed Windows devices running Windows 10 or Windows 8.1.

Configuration Manager provides the following management capabilities for BitLocker Drive Encryption:.You must enable this feature before using it. Configuration Manager doesn't enable this optional feature by default.It provides full BitLocker lifecycle management that can replace the use of Microsoft BitLocker Administration and Monitoring (MBAM). Starting in version 1910, use Configuration Manager to manage BitLocker Drive Encryption (BDE) for on-premises Windows clients, which are joined to Active Directory.
