From 620086410e612acf5e74477b51b5027418700d2c Mon Sep 17 00:00:00 2001 From: Rafals <51166236+rafals2@users.noreply.github.com> Date: Mon, 27 Jul 2020 22:57:38 -0700 Subject: [PATCH] added tip to key rotation --- windows/client-management/mdm/bitlocker-csp.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/windows/client-management/mdm/bitlocker-csp.md b/windows/client-management/mdm/bitlocker-csp.md index 3a1ecfb0f9..10aec13178 100644 --- a/windows/client-management/mdm/bitlocker-csp.md +++ b/windows/client-management/mdm/bitlocker-csp.md @@ -1072,6 +1072,19 @@ Each server-side recovery key rotation is represented by a request ID. The serve Value type is string. Supported operation is Execute. Request ID is expected as a parameter. +> [!TIP] +> Key rotation feature will only work when: + +> For Operating system drives: +> OSRequireActiveDirectoryBackup_Name is set to 1 ("Required") + +> For Fixed data drives: +> FDVRequireActiveDirectoryBackup_Name is set to 1 = ("Required") + +> Although not required, we recommend configuring: +> OSActiveDirectoryBackup_Name to true +> FDVActiveDirectoryBackup_Name to true + **Status** Interior node. Supported operation is Get.