Skip to content

How to Fetch Bitlocker Tags from MECM (SCCM)

Bitlocker information from MECM (SCCM) can be found in Available SCCM SQL Views v_GS_encryptable_volume. The value to retrieve from SCCM to determine if a disk on a machine has Bitlocker enabled is “ProtectionStatus0”.

Finding Bitlocker information in vScope Tables
The Bitlocker Status tag will later be found for the Resource Type ‘Disks’.

How to Retrieve Bitlocker Status from MECM

  1. Open Tags
    Go to Tags -> Click on Created from discovery -> + Create tag.

    Creating a tag from discovery for Bitlocker

  2. Choose “Disks”
    Since “ProtectionStatus0” is read from the disk, select Disks.

    Tags from Discovery for Bitlocker Information from SCCM

  3. Name the Tag
    Give the tag a descriptive name, such as “SCCM – Bitlocker Status”, to clarify that the value is retrieved from SCCM. Search for “ProtectionStatus0” and select it.

    Instructional image showing the search process for BitLocker protection status within SCCM/MECM, focusing on filter and search setup.

  4. Set Value Interpretation
    Tell vScope to interpret the retrieved value as Text.

    Format settings for tags from discovery for Bitlocker SCCM

Done

vScope will inventory the Bitlocker status during the next discovery. The value in the Disks table will be displayed as:

  • 0 (Bitlocker is not enabled for the disk)
  • 1 (Bitlocker is enabled for the disk)
  • Other (Misconfigured)