
For enterprises, this setup can make software patches difficult to roll out to unattended desktops and remotely administered servers. Without Network Unlock, operating system volumes that use TPM+PIN protectors require a PIN when a computer reboots or resumes after hibernation (for example, by Wake on LAN). This feature requires the client hardware to have a DHCP driver implemented in its UEFI firmware. Network Unlock helps you manage BitLocker-enabled desktops and servers in a domain environment by automatically unlocking operating system volumes when the system is rebooted and is connected to a wired corporate network. Network Unlock was introduced in Windows 8 and Windows Server 2012 as a BitLocker protector option for operating system volumes.


This article for IT professionals describes how BitLocker Network Unlock works and how to configure it.
