@george1421 said in Skip Bitlocker detection?:
@gwhiteia What version of FOG are you running? 1.5.9?
Yes…1.5.9
@george1421 said in Skip Bitlocker detection?:
@gwhiteia What version of FOG are you running? 1.5.9?
Yes…1.5.9
@Tom-Elliott said in Skip Bitlocker detection?:
FOG already has the capability to do this, but we added a check because that was the “thought” we needed to do.
You can modify the file yourself.
You are, hopefully, familiar with postinit scripts:
The file you’ll want to replace is:
/usr/share/fog/lib/funcs.shThe line you would need to comment:
Line 290 in fsTypeSetting function.You should then have the ability to capture/deploy images using the “imager/raw” method.
I don’t see the directory you’ve listed above?
/usr/share/fog/… doesn’t seem to exist?
@Sebastian-Roth said in Skip Bitlocker detection?:
@gwhiteia said in Skip Bitlocker detection?:
Yes, we use BL without the TPM
But how?
We disable TPM in the BIOS prior to building our image and modify a few GPO settings to use passwords instead of PINs
@Sebastian-Roth said in Skip Bitlocker detection?:
@george1421 said in Skip Bitlocker detection?:
I question this statement and then question the value of bitlocker if you can do this successfully. As long as you are using the tpm chip there should be no value in cloning a bitlocker protected partition unless it will be used to restore back to the same computer. If you are doing a one to many deployment with this image it should fail on every computer you deploy it to because the certificate held in the tpm chip will not match. If you can do this then something is wrong with bitlocker.
@gwhiteia Can you please comment on this before we go ahead and change things. This is the basis on why we added the bitlocker check as a hard break in the scripts instead of making it optional. Do you use bitlocker without TPM or how does it work in your case?
Yes, we use BL without the TPM
@george1421 said in Skip Bitlocker detection?:
@Tom-Elliott said in Skip Bitlocker detection?:
The only change is a minor GUI addition and a little change to the Init fsType script.
Do you want me to put in a request for this so we can track it?
Yes, please
That’s awesome…thanks Tom!
Is that something that could be incorporated into the web interface? Perhaps in the definition of the image?
I know the general thought is that Bitlocker should be disabled prior to imaging, but we’ve done it using CloneZilla and had no issues.
CloneZilla captures the partitions it knows about in their native filesystems, and then does the BL’ed partition as RAW…it doesn’t force us to do the whole drive as RAW.
Could the developers perhaps add that functionality as a switch in the image definition - Skip Bitlocker detection - yes/no?
I love the product, but I can’t use it without this feature.
Thanks!