Staff

Technical Tip: Check BitLocker encryption status via Endpoint Compliance custom scan

Description

This article describes custom scan required to check BitLocker encryption status as part of an Endpoint Compliance scan.

Scope

FortiNAC-F.

Solution

In the Endpoint Compliance section, create a Custom Scan like the one below:

Hive Name ="HKEY_LOCAL_MACHINE"
Key Name = "SYSTEM\CurrentControlSet\Control\BitlockerStatus"

Value Name = BootStatus

Type = REG_DWORD

Data =1

image (5).png

This custom scan can be called inside the Endpoint Compliance Configuration and Policy respectively.

Sign up