This article will ask you important questions to help you better understand what can and cannot be done with MBAM on different hardware and OS Combinations.

PC Hardware (Non-Apple)

  • Do you have any devices running Windows 7?
    • If you do, those systems require a TPM Chip to be encrypted otherwise you must upgrade those devices to Windows 8.1 or Windows 10
  • Do you have any non-Dell devices with TPM chips?
    • If you do you will not be able to:
      • Run the SCCM Deployment that modifies the TPM chip as it is specific to Dell hardware
      • Run the SCCM Task Sequence (OSD) that modifies the TPM chip as it is specific to Dell hardware
  • Do you have any devices that do not have a TPM Chip?
    • If you do you will need to run at a minimum Windows 8.1 and apply the non-TPM GPO to those systems¬† which requires a BitLocker passphrase at start up

Apple Hardware

  • Are you dual booting your Apple Hardware?
    • This is not supported.¬† You have three options:
      1. Natively boot into OS X, encrypt with FileVault2, and run Windows as a Virtual Machine (non-bootcamp)
      2. Natively boot into OS X, encrypt with FileVault2, and not run Windows any longer
      3. Remove the the Apple Partitions, Natively boot into Windows 8.1 or greater, and encrypt with MBAM encryption
  • Are you running Windows 7 only on your Apple hardware?
    • You will need to upgrade to Windows 8.1 or greater for MBAM Encryption to work due to Apple Hardware not having a TPM Chip

Hardware and OS Support Matrix

Supported OS, TPM, GPO, and Hardware Combinations (103959)

Back to How to setup MBAM for a Department

Article number: 
104356
Last updated: 
May 23, 2016
Category: