Illustrated Features of an MBAM 2.5 Deployment

  • Artikkel

Gjelder for: Microsoft BitLocker Administration and Monitoring 2.5

This topic describes the individual features that make up a deployment for the following topologies:

  • MBAM Stand-alone

  • System Center Configuration Manager Integration

Viktig

These features do not represent the recommended architecture for deploying MBAM. Use this information only as a guide to understand the individual features that make up an MBAM deployment. See High-Level Architecture for MBAM 2.5 for the recommended architecture for MBAM.

For a list of the supported versions of the software mentioned in this topic, see MBAM 2.5 Supported Configurations.

MBAM Stand-alone topology

The following image and table explain the features in an MBAM Stand-alone topology.

Feature type Feature Description

Database

Recovery Database

This database stores recovery data that is collected from MBAM client computers.

This feature is configured on a server running Windows Server and a supported SQL Server instance.

Compliance and Audit Database

This database stores compliance data, which is used primarily for the Reports that SQL Server Reporting Services hosts.

This feature is configured on a server running Windows Server and a supported SQL Server instance.

Compliance and Audit Reports

Reporting Web Service

This web service enables communication between the Administration and Monitoring Website and the SQL Server instance where reporting data is stored.

This feature is installed on a server running Windows Server.

Reporting Website (Administration and Monitoring Website)

You view Reports from the Administration and Monitoring Website. The Reports provide recovery audit and compliance status data about the client computers in your enterprise.

This feature is configured on a server running Windows Server.

SQL Server Reporting Services (SSRS)

Reports are configured in an SSRS database instance. Reports can be viewed directly from SSRS or from the Administration and Monitoring Website.

This feature is configured on a server running Windows Server and a supported SQL Server instance that is running SSRS.

Self-Service Server

Self-Service Web Service

This web service is used by the MBAM Client and the Administration and Monitoring Website and Self-Service Portal to communicate to the Recovery Database.

This feature is installed on a computer running Windows Server.

Self-Service Website (Self-Service Portal)

This website enables end users on client computers to independently sign in to a website to get a recovery key if they lose or forget their BitLocker password.

This feature is configured on a computer running Windows Server.

Administration and Monitoring Server

Administration and Monitoring Web Service

The Monitoring Web Service is used by the MBAM Client and the websites to communicate to the databases.

This feature is installed on a computer running Windows Server.

Administration and Monitoring Website (also known as the Help Desk

This Website is used by Help Desk users (users with the MBAM Report Users rights) to help end users regain access to their computers when they forget their PIN or password.

This feature is configured on a computer running Windows Server.

System Center Configuration Manager Integration topology

The following image and table explain the features in the System Center Configuration Manager Integration topology.

Feature type Feature Description

Self-Service Server

Self-Service Web Service

This web service is used by the MBAM Client and the Self-Service Portal to communicate to the Recovery Database.

This feature is installed on a computer running Windows Server.

Self-Service Website

This website enables end users on client computers to independently sign in to a website to get a recovery key if they lose or forget their BitLocker password.

This feature is configured on a computer running Windows Server.

Administration and Monitoring Server/Recovery Audit Report

Administration and Monitoring Web Service

This web service enables communication between the Administration and Monitoring Website and the SQL Server databases where reporting data is stored.

This feature is installed on a server running Windows Server.

Administration and Monitoring Website

The Recovery Audit report is viewed from the Administration and Monitoring Website. Use the Configuration Manager console to view all other reports, or view reports directly from SQL Server Reporting Services.

This feature is configured on a server running Windows Server.

Databases

Recovery Database

This database stores recovery data that is collected from MBAM client computers.

This feature is configured on a server running Windows Server and a supported SQL Server instance.

Audit Database

This database stores audit information about recovery attempts and activity.

This feature is configured on a server running Windows Server and a supported SQL Server instance.

Configuration Manager Features

Configuration Manager Management console

This console is built into Configuration Manager and is used to view reports.

For viewing reports only, this feature can be installed on any server or client computer.

Configuration Manager Reports

Reports show compliance and recovery audit data for client computers in your enterprise.

The Reports feature is installed on a server running Windows Server and SSRS, and Reports run on a supported SQL Server instance. A reporting services point must be defined in Configuration Manager on the server that is running SSRS.

SQL Server Reporting Services

SSRS enables the MBAM Reports. Reports can be viewed directly from SSRS or from the Configuration Manager console.

SSRS is installed on a server running Windows Server. A reporting services point must be defined in Configuration Manager on the server that is running SSRS.

Got a suggestion for MBAM?

Add or vote on suggestions here. For MBAM issues, use the MBAM TechNet Forum.

Se også

Andre ressurser

High-Level Architecture for MBAM 2.5
Getting Started with MBAM 2.5