BitLocker Installation Guide

Prerequisites

• Minimum Version: Requires SysTrack 10.1 or later.

Notes

• After this DEX Pack is installed, it may take up to 24 hours for data to appear.

• If you update or reinstall this DEX Pack, you must reassign any Views created below to the SF_BitLocker Role and reenable the bitlocker Action in Action Governance.

Installation Steps

To install this DEX Pack, complete the following steps:

1. Import the Kit.

2. Enable the bitlocker Action.

3. Create the BitLocker View.

4. Assign the View to the SF_BitLocker Role.

5. Assign the Role to relevant Configurations.

Import the Kit

Enable the bitlocker Action

1. Verify you have unlocked the tenant next to your username.

2. In Configure, click Automations and Collection Extensions on the left.

3. Select Action Governance, then click the Pending Approval tab.

4. Find the bitlocker Action and select the checkbox next to it.

5. Click Approve, then confirm. The action moves to the Actions tab and is enabled automatically.

   NOTE: In SysTrack Cloud, the user who imported the Kit may not be allowed to approve its actions. If the checkbox is unavailable, ask another user with Action Governance – Management permission to approve the action.

Create the BitLocker View

The BitLocker Dashboard requires you to make a View for the SF_BitLocker Role.

To create the new View:

1. Navigate to Configure > Views.

2. Click the padlock icon in the upper-right to enable editing.

3. Click the plus icon to add a new View.

4. Fill in the Settings as follows:

   1. View Name: SF_BITLOCKER

   2. Existing Category: Custom

   3. Expires in: 30 Days

   4. When Expired: Overwrite

   5. Do NOT check When overdue by 1 day(s).

   6. Set the Refresh drop-downs to Daily, Inside, 24x7, and Every Day.

   7. Copy the SF_BITLOCKER SQL Query, and paste it into the box under SQL Selection > Generic.

   8. Click Test SQL. A Success message should appear at the top of the screen. If the test is not successful, the query may have been copied incorrectly.

5. Click Create View at the top-right.

SF_BITLOCKER SQL Query

SELECT
	T0.WGUID,
	GETUTCDATE() AS VWTIME,
	S0.STRVALUE AS MountPoint,
	S1.STRVALUE AS EncryptionMethod,
	T0.AutoUnlockEnabled,
	T0.AutoUnlockKeyStored,
	T0.MetadataVersion,
	S2.STRVALUE AS VolumeStatus,
	S3.STRVALUE AS ProtectionStatus,
	S4.STRVALUE AS LockStatus,
	T0.EncryptionPercentage,
	T0.WipePercentage,
	S5.STRVALUE AS VolumeType,
	T0.CapacityGB,
	S6.STRVALUE AS KeyProtector 
FROM ((((((DYNI_BITLOCKER AS T0
LEFT JOIN SASTR_DYN AS S0 ON T0.MountPoint = S0.STRINGID)
LEFT JOIN SASTR_DYN AS S1 ON T0.EncryptionMethod = S1.STRINGID)
LEFT JOIN SASTR_DYN AS S2 ON T0.VolumeStatus = S2.STRINGID)
LEFT JOIN SASTR_DYN AS S3 ON T0.ProtectionStatus = S3.STRINGID)
LEFT JOIN SASTR_DYN AS S4 ON T0.LockStatus = S4.STRINGID)
LEFT JOIN SASTR_DYN AS S5 ON T0.VolumeType = S5.STRINGID)
LEFT JOIN SASTR_DYN AS S6 ON T0.KeyProtector = S6.STRINGID

Assign the View to the SF_BitLocker Role

To assign the new View:

1. Navigate to Configure > Roles.

2. Use the drop-down at the top to select the SF_BitLocker Role.

3. Click Views, then check the box next to SF_BITLOCKER.

4. Click Save Changes at the top-right.

Assign the BitLocker Role to Relevant Configurations

This DEX Pack requires you to assign the SF_BitLocker Role to the relevant Configurations:

1. Navigate to Configure > Configurations.

2. Click the padlock icon in the upper-right to enable editing.

3. Use the drop-down at the top to select a relevant Configuration, or create a new Configuration.

4. Assign SF_BitLocker Role to the Configuration by dragging it from Available Roles to Assigned Roles.

5. Click Save Changes at the top-right.

6. Repeat this process for any other relevant Configuration.