Export (0) Print
Expand All

MBAM 1.0 Deployment Prerequisites

Updated: November 1, 2012

Applies To: Microsoft BitLocker Administration and Monitoring 1.0

Before you begin the Microsoft BitLocker Administration and Monitoring (MBAM) Setup, make sure that you meet the necessary prerequisites to install the product. This section contains information to help you successfully prepare your computing environment before you deploy the MBAM Clients and Server features.

Installation prerequisites for MBAM Server features

Each of the MBAM server features has specific prerequisites that must be met before they can be successfully installed. MBAM Setup verifies if all prerequisites are met before the installation starts.

Installation prerequisites for Administration and Monitoring Server

The following table contains the installation prerequisites for the MBAM Administration and Monitoring Server:

 

Prerequisite Details

Windows ServerWeb Server Role

This role must be added to a server operating system supported for the Administration and Monitoring Server feature.

Web Server (IIS) Management Tools

IIS Management Scripts and Tools

Web Server Role Services

Common HTTP Features:

  • Static Content

  • Default Document

Application Development:

  • ASP.NET

  • .NET Extensibility

  • ISAPI Extensions

  • ISAPI Filters

Security:

  • Windows Authentication

  • Request Filtering

Windows Server Features

Microsoft .NET Framework 3.5.1 features:

  • .NET Framework 3.5.1

  • WCF Activation

    • HTTP Activation

    • Non-HTTP Activation

Windows Process Activation Service

  • Process Model

  • .NET Environment

  • Configuration APIs

noteNote
For a list of supported operating systems, see MBAM 1.0 Supported Configurations.

Installation prerequisites for the Compliance and Audit Reports

The Compliance and Audit Reports must be installed on a supported version of SQL Server. Installation prerequisites for this feature include SQL Server Reporting Services (SSRS).

SSRS must be installed and running during MBAM server installation. SSRS should also be configured in “native” mode, not in the “unconfigured” or “SharePoint” mode.

noteNote
For a list of supported operating systems and SQL Server versions, see MBAM 1.0 Supported Configurations.

Installation prerequisites for the Recovery and Hardware Database

The Recovery and Hardware Database must be installed on a supported version of SQL Server.

SQL Server must have Database Engine Services installed and running during the MBAM server installation. The Transparent Data Encryption (TDE) feature must be enabled.

noteNote
For a list of supported operating systems and SQL Server versions, see MBAM 1.0 Supported Configurations.

The TDE SQL Server feature performs real-time input/output (I/O) encryption and decryption of the data and log files. TDE protects data that is "at rest,” which include the data and the log files. It provides the ability to comply with many laws, regulations, and guidelines that are established in various industries.

noteNote
Because TDE performs real-time decryption of database information, the recovery key information will be visible if the account under which you are logged in has permissions to the database when you view the recovery key information SQL tables.

Installation prerequisites for the Compliance and Audit Database

The Compliance and Audit Database must be installed on a supported version of SQL Server.

SQL Server must have Database Engine Services installed and running during MBAM server installation.

noteNote
For a list of supported operating systems and SQL Server versions, see MBAM 1.0 Supported Configurations.

Installation prerequisites for MBAM Clients

The necessary prerequisites that you must meet before you begin the MBAM Client installation are the following:

  • Trusted Platform Module (TPM) v1.2 capability

  • The TPM chip must be turned on in the BIOS and it must be resettable from the operating system. For more information, see the BIOS documentation.

WarningWarning
Ensure that the keyboard, mouse, and video are directly connected to the computer, instead of to a keyboard, video, mouse (KVM) switch. A KVM switch can interfere with the ability of the computer to detect the physical presence of hardware.

See Also

-----
You can learn more about MDOP in the TechNet Library, search for troubleshooting on the TechNet Wiki, or follow us on Facebook or Twitter.
-----
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft