Query to check machines which are having 128 bit bitlocker algorithms

Question

As we know , BitLocker uses Advanced Encryption Standard (AES) as its encryption algorithm with configurable key lengths of 128 or 256 bits

I want to create a collection which will show machines which are having 128 bit encryption algorithm, can you please help me with the query.

Thanks in advance.

 

 

solved 0
Ketan Kamble 2020-06-20T17:23:25+05:30 3 Answers 995 views Beginner
0

Answers ( 3 )

  2. Ankit Shukla
    0
    2020-06-22T12:05:43+05:30
    Reply

    I have not implemented MBAM integration but try to Google it you will find your answers.

    1.Have you enabled the Bitlocker inventory in Client Settings?
    2. Try for Below query, different encryption value will show different encryption result.

    select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_BITLOCKER_DETAILS on SMS_G_System_BITLOCKER_DETAILS.ResourceId = SMS_R_System.ResourceId where SMS_G_System_BITLOCKER_DETAILS.EncryptionMethod = 5

    3. Go through below technet article where many have faced same issue.

    https://social.technet.microsoft.com/Forums/en-US/d06ac838-87e4-4f63-80d3-6fb3d080e6c9/configmgr-integrated-reports-still-show-blank-cipher-strength?forum=mdopmbam

    4. There is an inbuilt report which will show the data you required but you need to change few values in report mentioned in above technet article.

    !!!NEW VALUE!!!

    =Switch(Fields!EncryptionMethod.Value=4294967294, “Unknown”, Fields!EncryptionMethod.Value=0, “None”, Fields!EncryptionMethod.Value=1, “128-Bit with Diffuser”, Fields!EncryptionMethod.Value=2, “256-Bit with Diffuser”, Fields!EncryptionMethod.Value=3, “128-Bit”, Fields!EncryptionMethod.Value=4, “256-Bit”, Fields!EncryptionMethod.Value=5, “Hardware”, Fields!EncryptionMethod.Value=6, “128-Bit XTS”, Fields!EncryptionMethod.Value=7, “256-Bit XTS”)

    Best answer
  4. Karthikeyan
    1
    2020-06-21T07:16:02+05:30
    Reply

    Hi,

    Personally i am not looked into that MBAM views and tables in SCCM DB. Working on MBAM integration POC with SCCM 2002 version. Soon i will findout this information will be available on what tables and views in SCCM.

    Thanks
    karthikeyan

  6. Anoop C Nair
    0
    2020-06-21T06:03:32+05:30
    Reply

    Hello – I don’t have the exact query details but you might get the query if you try the following method yourself

    https://www.anoopcnair.com/sccm-dynamic-collection-part-2/

Leave an answer

Sorry, you do not have permission to answer to this question .