topic Bitlocker Volume Status questions in Cortex XDR Discussions

Bitlocker Volume Status questions

RFeyertag — Thu, 08 Sep 2022 20:57:58 GMT

Hello dear community members!

What is the difference between the locked symbol with the exklamation mark and without?

Bitlocker is turned on through windows directly and not through cortex. Encryption Status = Not Configured.

We are a bit confused about the exklamation mark. What is it saying exactly?

Rob

Re: Bitlocker Volume Status questions

neelrohit — Fri, 09 Sep 2022 07:50:30 GMT

Hi @RFeyertag ,

Thank you for reaching out to live community!

The Exclammation on the lock icon means that the endpoint is awaiting bitlocker activation. As you would see, there is also a column on Cortex XDR which states the encryption status whether the disk encryption has following status:

If I am not wrong, you will see the status beside the column in your screenshot which would state whether the bitlocker is configured on both of the endpoints of not. However, if the endpoint does not have bitlocker configured and is compatible for bitlocker encryption, it will show the "!" mark showing awaiting activation with the lock sign.

Hope this helps.

Best Regards

Re: Bitlocker Volume Status questions

RFeyertag — Fri, 09 Sep 2022 11:22:21 GMT

Hello Neelrohit,

this isn't the answer we expected.

There are 3 symbols in the volume status. Is there any explanation for them?

Rob

Re: Bitlocker Volume Status questions

RFeyertag — Fri, 09 Sep 2022 11:29:19 GMT

Now everything is ok. So I think it was a in between status. After a restart and check in it has now the expected status.

Rob