Is it possible to capture a TPM enabled computer's image?

[vince.villarreal]

So we are now pushing out computers to have TPM enabled.

Instead of capturing an image with TPM disabled, then going back into the bios after to re-enable TPM, I’d like to have it down to just keeping TPM enabled when capturing/deploying images.

Is this possible?

The last image I captured was on a computer that had TPM enabled, bitlocker turned off (30GB image), and then when I deployed it on another machine it was asking for the bitlocker recovery key.

Any help would be much appreciated.

[Wayne Workman]

@vince-villarreal said in Is it possible to capture a TPM enabled computer's image?:

Is this possible?

Even if you could - the image would be encrypted using the golden-machine’s TPM chip which obviously won’t work on another machine.

[vince.villarreal]

@wayne-workman ok, so turn TPM off, capture, deploy to a computer with TPM off, then after the image turn TPM on.

Is that about the only way to do this?

[Wayne Workman]

@vince-villarreal Yep. This can be automated with group policy though. When a box joins your domain automatically via the FOG Client, you can have group policy turn on TPM. I suppose TPM would need turned off somehow via postinit scripts.