Tanium Enforce BitLocker Enhancements – Tanium Tech Talks #116

For several years, Tanium has provided BitLocker management, helping users facilitate policy enforcement, encryption management, and recovery key backup. It remains a popular feature in Tanium Enforce.

We are excited to reaffirm our ongoing commitment to driving innovations that solve edge cases, enhance the user experience, and directly address customer feedback about how we can support improving your ability to manage BitLocker more easily, including simplifying setup, enhancing reporting, and offering granular control over recovery key visibility.

We are dedicated to making these processes as seamless as possible, especially in the event of a global security incident or outage when rapid key retrieval is essential. Our goal is to ensure that end users and help desk staff can swiftly and easily access the necessary keys, minimizing downtime while maintaining security.

Watch the video below to learn about the evolution of Tanium’s BitLocker management capabilities and see demos of the exciting new features built to help further centralize and improve your BitLocker management needs (and get a sneak peek into what’s in store for a future release of BitLocker v2 management capabilities).

Key takeaways

• New Tanium community for beginners: There’s a New Tanium User community designed for new users or novices to ask beginner questions and get help from other Tanium users. The community is structured similarly to platforms like Discord or Slack, with different channels for various topics. New users can filter by “Top Questions” or the “Latest Posts” to ask their questions by jumping into a thread or starting a new discussion.
  
  This community is not only for interacting with Tanium employees but also includes partners and other Tanium users who can assist one another. All users can earn Titan badges by asking and answering questions, which will be displayed in their profiles.
• New and enhanced BitLocker management capabilities:
  • A new streamlined recovery key page enables help desk staff to easily access and manage recovery keys while using management rights to ensure that only the appropriate staff can view the keys they are responsible for.
  • The end-user recovery portal has been enhanced for both on-premises and cloud environments. It now enables users to obtain their own recovery keys without needing to contact the help desk and supports various operating systems and identity providers.
  • New BitLocker policy configurations combine encryption and additional policy settings in one place, making it easier for users to manage policies effectively.
  • New enhancements provide extended visibility for Mac FileVault, including the recovery key page and end-user recovery portal, allowing users to consolidate Mac FileVault insights alongside BitLocker into a single view.
• New feature demos: Tim walked through these new features, including the streamlined recovery key page, management rights for recovery keys, and the ability to rotate and delete keys.

Additional resources

• New Tanium User community
• Migrating BitLocker management to Tanium Enforce
• How to create a BitLocker policy
• Windows encryption management reference guide
• macOS encryption management reference guide