MBAM Supported Configurations

  • Article

Applies To: Microsoft BitLocker Administration and Monitoring

This topic specifies the supported configurations for Microsoft BitLocker Administration and Monitoring (MBAM) server and client computers.

Note

Microsoft provides support for the current service pack, and in some cases, the earlier service pack. To find the support timelines for your product, see the Lifecycle Supported Service Packs (https://go.microsoft.com/fwlink/?LinkId=31975). For more information about Microsoft Support Lifecycle Policy, see Microsoft Support Lifecycle Support Policy FAQ (https://go.microsoft.com/fwlink/?LinkId=31976).

Operating System Requirements for MBAM Server Computers

The following operating systems support the server roles required for Microsoft BitLocker Administration and Monitoring.

Operating system Editions Service pack System architecture

Windows Server 2008

Standard, Enterprise, Data Center, or Web Server

SP2 only

x86 and x64

Windows Server 2008 R2

Standard, Enterprise, Data Center, or Web Server

64-bit

Warning

We recommend that you do not install the services, reports, or databases on a domain controller.

This section contains configuration information that is specific to this release.

Installation Prerequisites for BitLocker Administration and Monitoring Servers

Each of the Microsoft BitLocker Administration and Monitoring server features has specific prerequisites that must be met before the MBAM features can be successfully installed. MBAM Setup checks that all prerequisites are met before installation starts.

Prerequisites for Administration and Monitoring Server

The following is a list of the prerequisites for the Microsoft BitLocker Administration and Monitoring server:

  • Windows Server Web Server Role

  • Web Server (IIS) Management Tools

    • IIS Management Scripts and Tools

  • Web Server Role Services

    Common HTTP Features:

    • Static Content

    • Default Document

    Application Development:

    • ASP.NET

    • .NET Extensibility

    • ISAPI Extensions

    • ISAPI Filters

    Security:

    • Windows Authentication

    • Request Filtering

  • Windows Server Features

    • .NET Framework 3.5.1 features

      • .NET Framework 3.5.1

      • WCF Activation

        • HTTP Activation

        • Non-HTTP Activation

    • Windows Process Activation Service

      • Process Model

      • .NET Environment

      • Configuration APIs

Prerequisites for the Compliance and Audit Reports Server

The Compliance and Audit Reports Server prerequisites include the SQL Server Reporting Services (SSRS) feature of Microsoft SQL Server 2008 R2, Standard, Enterprise, Datacenter, or the Developer edition.

SSRS must be installed and running during MBAM server installation. SSRS should also be configured in “native” mode and not in the unconfigured or “SharePoint” mode configurations.

Prerequisites for the Recovery and Hardware Database Server

The Recovery and Hardware Database Prerequisites include the following:

  • Microsoft SQL Server 2008 R2, Enterprise, Datacenter, or Developer edition

  • SQL Server must have Database Engine Services installed and running during MBAM server installation and the Transparent Data Encryption (TDE) feature must be enabled.

Prerequisites for the Compliance Status Database Server

The Compliance Status Database Prerequisites include the following:

  • Microsoft SQL Server 2008 R2, Standard, Enterprise, Datacenter, or Developer edition

  • SQL Server must have Database Engine Services installed and running during MBAM server installation.

Operating System Requirements for MBAM Client Computers

The following table lists the operating systems that are supported for Microsoft BitLocker Administration and Monitoring client installation.

You can install the Microsoft BitLocker Administration and Monitoring client on any computer that meets the following requirements.

Operating system Edition Service pack System architecture

Windows 7

Enterprise Edition

None, SP1

x86 or x64

Windows 7

Ultimate Edition

None, SP1

x86 or x64

  • Trusted Platform Module (TPM) v1.2 capability

  • The TPM chip must be turned on in the BIOS and be resettable from the operating system. For more information, see the BIOS documentation.

Warning

Ensure that the keyboard, mouse, and video are directly connected and not managed through a keyboard, video, mouse (KVM) switch. A KVM switch can interfere with the ability of the computer to detect the physical presence of hardware.

There are no special RAM requirements that are specific to Microsoft BitLocker Administration and Monitoring.

See Also

Other Resources

Planning for MBAM