> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.trugrid.com/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# TruGrid BitLocker - Device Management Overview

TruGrid BitLocker Device Management lets you enroll Windows devices, monitor their agent status, and control BitLocker encryption from the TruGrid admin panel. This article covers the **BitLocker Management** page for a customer domain.

## Prerequisites

* Admin access to the TruGrid admin panel for the customer domain
* Windows devices that meet the requirements in [Device Management (IoT) Agent Dependencies](https://help.trugrid.com/en/article/device-management-iot-agent-dependencies-nczj4r/)
* Local administrator rights on each device to install the TruGrid IoT Agent

## Where to find it

Sign in to the TruGrid admin panel and go to **Company > BitLocker Management**.

The page has two tabs:
* **Devices**: enroll devices, monitor agent status, uninstall or remove devices
* **Encryption**: turn BitLocker on or off and manage encryption passwords

![](https://storage.crisp.chat/users/helpdesk/website/-/f/4/7/3/f473d72e7d7c5000/image_1lbc9cr.png)
###### Enrolling a device

| You can push the IoT agent en masse by following this article:  [TruGrid BitLocker Command for Silent Installation](https://help.trugrid.com/en/article/trugrid-bitlocker-command-for-silent-installation-14bqmzr/)

1. In the **Devices** tab, open the **Enrollment File** dropdown.
2. Download the enrollment MSI, or copy the direct download link to fetch it on the device itself. The MSI is pre-associated with your TruGrid domain, so no additional configuration is needed at install time.
3. Run the MSI on the device as an administrator. For unattended deployment through RMM or scripting, see [TruGrid BitLocker Command for Silent Installation](https://help.trugrid.com/en/article/trugrid-bitlocker-command-for-silent-installation-14bqmzr/).
4. Once the agent connects, the device appears in the **Devices** list.

For more on the enrollment file, see [Device Management Enrollment File for a Customer Domain](https://help.trugrid.com/en/article/device-management-enrollment-file-for-a-customer-domain-yooxg0/).

## Devices tab

Each device row shows:
* **Hostname**, with an agent status underneath (see below)
* **Status**: Online or Offline
* **Dates & Times**: when the device was added and when the agent last connected
* **IP Address**: external and internal address reported by the agent
* **Actions**: Uninstall or Delete

|| An info icon next to a hostname indicates the device needs an updated agent before all current features are available.

### Agent statuses
* **Licensed / Unlicensed**: whether a license is assigned to the device
* **Pending install**: enrollment started, agent has not connected yet
* **Installed**: agent is installed and reporting
* **Pending uninstall**: uninstall has been requested and will complete the next time the device comes online
* **Uninstalled**: agent has been removed

Use the filter to narrow the list by device or status, or search by device name.

### Uninstall vs Delete

* **Uninstall** removes the TruGrid IoT Agent from the device. If the device is offline, the status changes to Pending uninstall and the agent is removed when it reconnects.
* **Delete** removes the device record from TruGrid.

Neither action changes the BitLocker state of the device. Drives stay encrypted or unencrypted as they were. Decryption is done from the Encryption tab.

### Compliance Report
**Compliance Report** exports the device list as a CSV.

![](https://storage.crisp.chat/users/helpdesk/website/-/f/4/7/3/f473d72e7d7c5000/image_1orhi5q.png)
## Encryption tab

![](https://storage.crisp.chat/users/helpdesk/website/-/f/4/7/3/f473d72e7d7c5000/image_m3rmh4.png)
The **Encryption** tab lists each device with a device-level **Protection Status** toggle. Expand a device to see its drives, each with its own BitLocker toggle, Auto-unlock status, and encryption password.
### Turning encryption on and off

* **ON** starts BitLocker encryption on the device. The end user sees the standard Windows BitLocker encryption process. No other prompts are shown.
* **OFF** decrypts the device.

### Auto-unlock

Auto-unlock applies to data drives. System drives show N/A.

### Encryption password

Expand a drive to see its encryption password. Use the controls to reveal it, copy it, or regenerate it.

## Related articles

* [Device Management (IoT) Agent Dependencies](https://help.trugrid.com/en/article/device-management-iot-agent-dependencies-nczj4r/)
* [Device Management Enrollment File for a Customer Domain](https://help.trugrid.com/en/article/device-management-enrollment-file-for-a-customer-domain-yooxg0/)
* [TruGrid BitLocker Command for Silent Installation](https://help.trugrid.com/en/article/trugrid-bitlocker-command-for-silent-installation-14bqmzr/)
* [Troubleshooting BitLocker Device Management EndPoints](https://help.trugrid.com/en/article/troubleshooting-bitlocker-device-management-endpoints-1umzdsj/)
* [How to enable BitLocker Pre-Boot PIN on TPM chip machine](https://help.trugrid.com/en/article/how-to-enable-bitlocker-pre-boot-pin-on-tpm-chip-machine-15i9eqd/)