ePO MNE Bitlocker showing no recovery keys

[kadeem_scan]

Good Day,

I am hoping someone can give me some assistance. I have a windows 10 machine that had MNE Bitlocker deployed to it via ePO, Version 5.0.1. it installed successfully and user set their pin. However, they have forgotten their pin and in trying to do a recovery via the recovery keyID I am getting "No recovery key found for this system". The machine is being managed and I am seeing in the MNE tab the volume is encrypted and the users of the system....

PLEASE HELP

[jsubbura]

Hi @kadeem_scan ,

Thank you for writing in here.

Do you see the key in here? 

System Tree -> Select the machine -> Actions -> McAfee Management of Native Encryption -> McAfee Management of Native Encryption Recovery. 

Thank you.

[kadeem_scan]

Hey Jsubbura,

Thanks for the reply, I checked there I am not seeing any keys.

[jsubbura]

Hi @kadeem_scan ,

Thank you for the update.

Search for the machine name in System tree, then Actions -> Agent -> Show Threat Events,

Then can you search for the event 35212, and 35205 and share us the screenshots for the same.

Then can you send us full page screenshot from the MNE tab which shows its managed.

Thank  you.

[kadeem_scan]

Hey Jsubbura,

Please see attached.It's not saying managed in the MNE tab which is strange seeing that the Pin dialogue box appeared and he entered his pin. It is also showing the user information as well.

[jsubbura]

Hi @kadeem_scan ,

Thank you for your update.

Then the bit-locker would have been activated manually from the local machine as we dont see any managed status in the MINE tab.

And as per the other screenshot it says, FileVault or Bitlocker already turned on. 

If Bitlocker was turned on by MNE you would see a similar Event under that machine.

Thank you

[kadeem_scan]

Hey jsubbura,

So that means there is no way of getting the recovery key because the key wasn't sent to ePO. So basically the drive is useless now..??

[jsubbura · Accepted solution]

Hi @kadeem_scan ,

The only options we have is the Pin and the Recovery key, from McAfee MNE point of view there are no options for this recovery as the bit locker was not managed by MNE on this machine. 

Thank you.

[kadeem_scan]

Hey @jsubbura ,

Thanks much for your quick and clear replies.