Edit the Configuration.mof File

Artigo
12/11/2014

Aplica-se a: Microsoft BitLocker Administration and Monitoring 2.0, Microsoft BitLocker Administration and Monitoring 2.0 SP1

To enable the client computers to report BitLocker compliance details through the MBAM Gestor de configuração reports, you have to edit the Configuration.mof file, whether you are using Configuration Manager 2007 or System Center 2012 Configuration Manager. Complete the following instructions for the version of Gestor de configuração that you are using.

Importante

If you are installing Microsoft BitLocker Administration and Monitoring (MBAM) 2.0 Service Pack 1 (SP1), either by doing a new installation or by upgrading from a previous version, see the appropriate item in About MBAM 2.0 SP1 as described in the following bullets:

For a new MBAM 2.0 SP1 installation, see Required files for installing MBAM 2.0 SP1 if you are using MBAM with Configuration Manager.
For an upgrade to MBAM 2.0 SP1, see Update the configuration.mof file if you upgrade to MBAM 2.0 SP1 and you are using MBAM with Configuration Manager 2007.

To create the configuration.mof file if you are using MBAM 2.0 SP1 with Gestor de configuração

See the “Important” note about MBAM 2.0 SP1 earlier in this topic for the appropriate instructions to follow in About MBAM 2.0 SP1.

To edit the Configuration.mof file for System Center 2012 Configuration Manager

On the Gestor de configuração Server, browse to the location of the Configuration.mof file:

<CMInstallLocation>\Inboxes\clifiles.src\hinv\

On a default installation, the installation location is %systemdrive%\Program Files \Microsoft Configuration Manager.

Edit the Configuration.mof file to append the following MBAM classes:

//===================================================

// Microsoft BitLocker Administration and Monitoring 

//===================================================

#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("Win32_BitLockerEncryptionDetails", NOFAIL)

[Union, ViewSources{"select DeviceId, BitlockerPersistentVolumeId, BitLockerManagementPersistentVolumeId, BitLockerManagementVolumeType, DriveLetter, Compliant, ReasonsForNonCompliance, KeyProtectorTypes, EncryptionMethod, ConversionStatus, ProtectionStatus, IsAutoUnlockEnabled from Mbam_Volume"}, ViewSpaces{"\\\\.\\root\\microsoft\\mbam"}, dynamic, Provider("MS_VIEW_INSTANCE_PROVIDER")]

class Win32_BitLockerEncryptionDetails

{

    [PropertySources{"DeviceId"},key]

    String     DeviceId;

    [PropertySources{"BitlockerPersistentVolumeId"}]

    String     BitlockerPersistentVolumeId;

    [PropertySources{"BitLockerManagementPersistentVolumeId"}]

    String     MbamPersistentVolumeId;

    //UNKNOWN = 0, OS_Volume = 1, FIXED_VOLUME = 2, REMOVABLE_VOLUME = 3

    [PropertySources{"BitLockerManagementVolumeType"}]

    SInt32     MbamVolumeType;

    [PropertySources{"DriveLetter"}]

    String     DriveLetter;

    //VOLUME_NOT_COMPLIANT = 0, VOLUME_COMPLIANT = 1, NOT_APPLICABLE = 2

    [PropertySources{"Compliant"}]

    SInt32     Compliant;

    [PropertySources{"ReasonsForNonCompliance"}]

    SInt32     ReasonsForNonCompliance[];

    [PropertySources{"KeyProtectorTypes"}]

    SInt32     KeyProtectorTypes[];

    [PropertySources{"EncryptionMethod"}]

    SInt32     EncryptionMethod;

    [PropertySources{"ConversionStatus"}]

    SInt32     ConversionStatus;

    [PropertySources{"ProtectionStatus"}]

    SInt32     ProtectionStatus;

    [PropertySources{"IsAutoUnlockEnabled"}]

    Boolean     IsAutoUnlockEnabled;

};


#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("Win32Reg_MBAMPolicy", NOFAIL)

 [DYNPROPS]

Class Win32Reg_MBAMPolicy

{

    [key]

    string KeyName;


    //General encryption requirements

    UInt32    OsDriveEncryption;

    UInt32    FixedDataDriveEncryption;

    UInt32    EncryptionMethod;


    //Required protectors properties

    UInt32    OsDriveProtector;

    UInt32    FixedDataDriveAutoUnlock;

    UInt32    FixedDataDrivePassphrase;


    //MBAM agent fields

    Uint32    MBAMPolicyEnforced;

    string    LastConsoleUser;

    datetime  UserExemptionDate;

    UInt32    MBAMMachineError;


    // Encoded computer name

    string    EncodedComputerName;

};


[DYNPROPS]

Instance of Win32Reg_MBAMPolicy

{

KeyName="BitLocker policy";


    //General encryption requirements


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|ShouldEncryptOsDrive"),Dynamic,Provider("RegPropProv")]

    OsDriveEncryption;

[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|ShouldEncryptFixedDataDrive"),Dynamic,Provider("RegPropProv")]

    FixedDataDriveEncryption;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE|EncryptionMethod"),Dynamic,Provider("RegPropProv")]

    EncryptionMethod;


    //Required protectors properties


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|OSVolumeProtectorPolicy"),Dynamic,Provider("RegPropProv")]

    OsDriveProtector;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|AutoUnlockFixedDataDrive"),Dynamic,Provider("RegPropProv")]

    FixedDataDriveAutoUnlock;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE|FDVPassphrase"),Dynamic,Provider("RegPropProv")]

    FixedDataDrivePassphrase;


    //MBAM agent fields


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|MBAMPolicyEnforced"),Dynamic,Provider("RegPropProv")]

    MBAMPolicyEnforced;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|LastConsoleUser"),Dynamic,Provider("RegPropProv")]

    LastConsoleUser;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|UserExemptionDate"),Dynamic,Provider("RegPropProv")]

    UserExemptionDate; //Registry value should be string in the format of yyyymmddHHMMSS.mmmmmmsUUU


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|MBAMMachineError"),Dynamic,Provider("RegPropProv")]

    MBAMMachineError;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|EncodedComputerName"),Dynamic,Provider("RegPropProv")]

    EncodedComputerName;

};


#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("CCM_OperatingSystemExtended", NOFAIL)

[Union, ViewSources{"select Name,OperatingSystemSKU from Win32_OperatingSystem"}, ViewSpaces{"\\\\.\\root\\cimv2"},

dynamic,Provider("MS_VIEW_INSTANCE_PROVIDER")]

class CCM_OperatingSystemExtended

{

    [PropertySources{"Name"},key]

    string     Name;

    [PropertySources{"OperatingSystemSKU"}]

    uint32     SKU;

};


#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("CCM_ComputerSystemExtended", NOFAIL)

[Union, ViewSources{"select Name,PCSystemType from Win32_ComputerSystem"}, ViewSpaces{"\\\\.\\root\\cimv2"},

dynamic,Provider("MS_VIEW_INSTANCE_PROVIDER")]

class CCM_ComputerSystemExtended

{

    [PropertySources{"Name"},key]

    string     Name;

    [PropertySources{"PCSystemType"}]

    uint16     PCSystemType;

};


//=======================================================

// Microsoft BitLocker Administration and Monitoring end

//=======================================================

To edit the Configuration.mof file for Configuration Manager 2007

On the Configuration Manager Server, browse to the location of the Configuration.mof file:

<CMInstallLocation>\Inboxes\clifiles.src\hinv\

On a default installation, the installation location is %systemdrive%\Program Files (x86)\Microsoft Configuration Manager.

Edit the Configuration.mof file to append the following MBAM classes:

//===================================================

// Microsoft BitLocker Administration and Monitoring 

//===================================================


#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("Win32_BitLockerEncryptionDetails", NOFAIL) 

[Union, ViewSources{"select DeviceId, BitlockerPersistentVolumeId, BitLockerManagementPersistentVolumeId, BitLockerManagementVolumeType, DriveLetter, Compliant, ReasonsForNonCompliance, KeyProtectorTypes, EncryptionMethod, ConversionStatus, ProtectionStatus, IsAutoUnlockEnabled from Mbam_Volume"}, ViewSpaces{"\\\\.\\root\\microsoft\\mbam"}, dynamic, Provider("MS_VIEW_INSTANCE_PROVIDER")]

class Win32_BitLockerEncryptionDetails

{

    [PropertySources{"DeviceId"},key]

    String     DeviceId;

    [PropertySources{"BitlockerPersistentVolumeId"}]

    String     BitlockerPersistentVolumeId;

    [PropertySources{"BitLockerManagementPersistentVolumeId"}]

    String     MbamPersistentVolumeId;

    //UNKNOWN = 0, OS_Volume = 1, FIXED_VOLUME = 2, REMOVABLE_VOLUME = 3

    [PropertySources{"BitLockerManagementVolumeType"}]

    SInt32     MbamVolumeType;

    [PropertySources{"DriveLetter"}]

    String     DriveLetter;

    //VOLUME_NOT_COMPLIANT = 0, VOLUME_COMPLIANT = 1, NOT_APPLICABLE = 2

    [PropertySources{"Compliant"}]

    SInt32     Compliant;

    [PropertySources{"ReasonsForNonCompliance"}]

    SInt32     ReasonsForNonCompliance[];

    [PropertySources{"KeyProtectorTypes"}]

    SInt32     KeyProtectorTypes[];

    [PropertySources{"EncryptionMethod"}]

    SInt32     EncryptionMethod;

    [PropertySources{"ConversionStatus"}]

    SInt32     ConversionStatus;

    [PropertySources{"ProtectionStatus"}]

    SInt32     ProtectionStatus;

    [PropertySources{"IsAutoUnlockEnabled"}]

    Boolean     IsAutoUnlockEnabled;

};


#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("Win32Reg_MBAMPolicy", NOFAIL)

 [DYNPROPS]

Class Win32Reg_MBAMPolicy

{

    [key]

    string KeyName;


    //General encryption requirements

    UInt32    OsDriveEncryption;

    UInt32    FixedDataDriveEncryption;

    UInt32    EncryptionMethod;


    //Required protectors properties

    UInt32    OsDriveProtector;

    UInt32    FixedDataDriveAutoUnlock;

    UInt32    FixedDataDrivePassphrase;


    //MBAM agent fields

    Uint32    MBAMPolicyEnforced;

    string    LastConsoleUser;

    datetime  UserExemptionDate;

    UInt32    MBAMMachineError;


    // Encoded computer name

    string    EncodedComputerName;

};


 [DYNPROPS]

Instance of Win32Reg_MBAMPolicy

{

    KeyName="BitLocker policy";


    //General encryption requirements


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|ShouldEncryptOsDrive"),Dynamic,Provider("RegPropProv")]

    OsDriveEncryption;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|ShouldEncryptFixedDataDrive"),Dynamic,Provider("RegPropProv")]

    FixedDataDriveEncryption;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE|EncryptionMethod"),Dynamic,Provider("RegPropProv")]

    EncryptionMethod;


    //Required protectors properties


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|OSVolumeProtectorPolicy"),Dynamic,Provider("RegPropProv")]

    OsDriveProtector;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|AutoUnlockFixedDataDrive"),Dynamic,Provider("RegPropProv")]

    FixedDataDriveAutoUnlock;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE|FDVPassphrase"),Dynamic,Provider("RegPropProv")]

    FixedDataDrivePassphrase;


    //MBAM agent fields


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|MBAMPolicyEnforced"),Dynamic,Provider("RegPropProv")]

    MBAMPolicyEnforced;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|LastConsoleUser"),Dynamic,Provider("RegPropProv")]

    LastConsoleUser;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|UserExemptionDate"),Dynamic,Provider("RegPropProv")]

    UserExemptionDate; //Registry value should be string in the format of yyyymmddHHMMSS.mmmmmmsUUU


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|MBAMMachineError"),Dynamic,Provider("RegPropProv")]

    MBAMMachineError;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|EncodedComputerName"),Dynamic,Provider("RegPropProv")]

    EncodedComputerName;

};


#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("Win32Reg_MBAMPolicy_64", NOFAIL)

[DYNPROPS]

Class Win32Reg_MBAMPolicy_64

{

    [key]

    string KeyName;


    //General encryption requirements

    UInt32    OsDriveEncryption;

    UInt32    FixedDataDriveEncryption;

    UInt32    EncryptionMethod;


    //Required protectors properties

    UInt32    OsDriveProtector;

    UInt32    FixedDataDriveAutoUnlock;

    UInt32    FixedDataDrivePassphrase;


    //MBAM agent fields

    Uint32    MBAMPolicyEnforced;

    string    LastConsoleUser;

    datetime  UserExemptionDate; //Registry value should be string in the format of yyyymmddHHMMSS.mmmmmmsUUU

    UInt32    MBAMMachineError;


    // Encoded computer name

    string    EncodedComputerName;

};


[DYNPROPS]

Instance of Win32Reg_MBAMPolicy_64

{

    KeyName="BitLocker policy";


    //General encryption requirements


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|ShouldEncryptOsDrive"),Dynamic,Provider("RegPropProv")]

    OsDriveEncryption;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|ShouldEncryptFixedDataDrive"),Dynamic,Provider("RegPropProv")]

    FixedDataDriveEncryption;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE|EncryptionMethod"),Dynamic,Provider("RegPropProv")]

    EncryptionMethod;


    //Required protectors properties


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|OSVolumeProtectorPolicy"),Dynamic,Provider("RegPropProv")]

    OsDriveProtector;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\MDOPBitLockerManagement|AutoUnlockFixedDataDrive"),Dynamic,Provider("RegPropProv")]

    FixedDataDriveAutoUnlock;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE|FDVPassphrase"),Dynamic,Provider("RegPropProv")]

    FixedDataDrivePassphrase;


    //MBAM agent fields


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|MBAMPolicyEnforced"),Dynamic,Provider("RegPropProv")]

    MBAMPolicyEnforced;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|LastConsoleUser"),Dynamic,Provider("RegPropProv")]

    LastConsoleUser;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|UserExemptionDate"),Dynamic,Provider("RegPropProv")]

    UserExemptionDate; //Registry value should be string in the format of yyyymmddHHMMSS.mmmmmmsUUU

    [PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|MBAMMachineError"),Dynamic,Provider("RegPropProv")]

    MBAMMachineError;


[PropertyContext("Local|HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\MBAM|EncodedComputerName"),Dynamic,Provider("RegPropProv")]

    EncodedComputerName;

};


#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("CCM_OperatingSystemExtended", NOFAIL)

[Union, ViewSources{"select Name,OperatingSystemSKU from Win32_OperatingSystem"}, ViewSpaces{"\\\\.\\root\\cimv2"},

dynamic,Provider("MS_VIEW_INSTANCE_PROVIDER")]

class CCM_OperatingSystemExtended

{

    [PropertySources{"Name"},key]

    string     Name;

    [PropertySources{"OperatingSystemSKU"}]

    uint32     SKU;

};


#pragma namespace ("\\\\.\\root\\cimv2")

#pragma deleteclass("CCM_ComputerSystemExtended", NOFAIL)

[Union, ViewSources{"select Name,PCSystemType from Win32_ComputerSystem"}, ViewSpaces{"\\\\.\\root\\cimv2"},

dynamic,Provider("MS_VIEW_INSTANCE_PROVIDER")]

class CCM_ComputerSystemExtended

{

    [PropertySources{"Name"},key]

    string     Name;

    [PropertySources{"PCSystemType"}]

    uint16     PCSystemType;

};


//=======================================================

// Microsoft BitLocker Administration and Monitoring end

//=======================================================

Consulte Também

Deploying MBAM with Configuration Manager

Outros Recursos

How to Create or Edit the mof Files

-----
You can learn more about MDOP in the TechNet Library, search for troubleshooting on the TechNet Wiki, or follow us on Facebook or Twitter.
-----

Share via