You have a server named Server 1.
You enable BitLocker Drive Encryption (BitLocker) on Server 1.
You need to change the password for the Trusted Platform Module (TPM) chip.
What should you run on Server1?
A.
Manage-bde.exe
B.
Set-TpmOwnerAuth
C.
bdehdcfg.exe
D.
tpmvscmgr.exe
Explanation:
The Set-TpmOwnerAuthcmdlet changes the current owner authorization value of the Trusted Platform Module
(TPM) to a new value. You can specify the current owner authorization value or specify a file that contains the
current owner authorization value. If you do not specify an owner authorization value, the cmdlet attempts to
read the value from the registry.
Use the ConvertTo-TpmOwnerAuthcmdlet to create an owner authorization value. You can specify a new
owner authorization value or specify a file that contains the new value.
Manage-bde.exe is: Modify bitlocker protection from a command line
bdehdcfg.exe: This tool is used to prepare a hard drive with the partitions necessary for BitLocker Drive Encryption. Most installations of Windows 7 will not need to use this tool because BitLocker setup includes the ability to prepare and repartition drives as required.
tpmvscmgr.exe: The Tpmvscmgr command-line tool allows users with Administrative credentials to create and delete TPM virtual smart cards on a computer.
2
0
https://technet.microsoft.com/en-us/library/jj603120.aspx
0
0
i found the same question only with no settpmownerauth as an answer… repair bde.exe?
0
0
A and B are correct
A for Win8 and 2012 only
B for Win7 and up – command line
However B sets the password
https://technet.microsoft.com/en-us/library/ff829858.aspx
A set Changes the TPM owner authorization value
https://technet.microsoft.com/en-us/library/jj603120.aspx
0
0