Articles on: Device Management

TruGrid BitLocker - Device Management Overview

TruGrid BitLocker Device Management lets you enroll Windows devices, monitor their agent status, and control BitLocker encryption from the TruGrid admin panel. This article covers the BitLocker Management page for a customer domain.

Prerequisites

Admin access to the TruGrid admin panel for the customer domain
Windows devices that meet the requirements in Device Management (IoT) Agent Dependencies
Local administrator rights on each device to install the TruGrid IoT Agent

Where to find it

The page has two tabs:

Devices: enroll devices, monitor agent status, uninstall or remove devices
Encryption: turn BitLocker on or off and manage encryption passwords

Enrolling a device

You can push the IoT agent en masse by following this article: TruGrid BitLocker Command for Silent Installation

In the Devices tab, open the Enrollment File dropdown.
Download the enrollment MSI, or copy the direct download link to fetch it on the device itself. The MSI is pre-associated with your TruGrid domain, so no additional configuration is needed at install time.
Run the MSI on the device as an administrator. For unattended deployment through RMM or scripting, see TruGrid BitLocker Command for Silent Installation.
Once the agent connects, the device appears in the Devices list.

For more on the enrollment file, see Device Management Enrollment File for a Customer Domain.

Devices tab

Each device row shows:

Hostname, with an agent status underneath (see below)
Status: Online or Offline
Dates & Times: when the device was added and when the agent last connected
IP Address: external and internal address reported by the agent
Actions: Uninstall or Delete

An info icon next to a hostname indicates the device needs an updated agent before all current features are available.

Agent statuses

Licensed / Unlicensed: whether a license is assigned to the device
Pending install: enrollment started, agent has not connected yet
Installed: agent is installed and reporting
Pending uninstall: uninstall has been requested and will complete the next time the device comes online
Uninstalled: agent has been removed

Use the filter to narrow the list by device or status, or search by device name.

Uninstall vs Delete

Uninstall removes the TruGrid IoT Agent from the device. If the device is offline, the status changes to Pending uninstall and the agent is removed when it reconnects.
Delete removes the device record from TruGrid.

Neither action changes the BitLocker state of the device. Drives stay encrypted or unencrypted as they were. Decryption is done from the Encryption tab.

Compliance Report

Compliance Report exports the device list as a CSV.

Encryption tab

The Encryption tab lists each device with a device-level Protection Status toggle. Expand a device to see its drives, each with its own BitLocker toggle, Auto-unlock status, and encryption password.

Turning encryption on and off

ON starts BitLocker encryption on the device. The end user sees the standard Windows BitLocker encryption process. No other prompts are shown.
OFF decrypts the device.

Auto-unlock

Auto-unlock applies to data drives. System drives show N/A.

Encryption password

Expand a drive to see its encryption password. Use the controls to reveal it, copy it, or regenerate it.

Updated on: 07/10/2026

Was this article helpful?

Thank you!