If users cannot log on to their computer (forgot BitLocker PIN, macOS password, etc.), they can use the Sophos Self Service Portal to retrieve a recovery key. With the recovery key, they can regain access to their computer. SafeGuard Enterprise enhances BitLocker capabilities significantly. Security policies for BitLocker can be centrally rolled out thanks to SafeGuard Enterprise. Even critical processes such as key management and key recovery are available when BitLocker is managed with SafeGuard Enterprise.

If users cannot log on to their computer (forgot BitLocker PIN, macOS password, etc.), they can use the Sophos Self Service Portal to retrieve a recovery key.

With the recovery key, they can regain access to their computer.

Sophos Bitlocker Suspended

To enable users to recover their computers in the Self Service Portal, go to Sophos Central > People > Users, select one or more users and click the Email Setup Link button. In the following dialog, select Sophos Central Self Service Welcome/Setup Email to email users an activation link. When users follow the instructions in the email, they can use the Sophos Self Service Portal to recover their computer.

Sophos Bitlocker Key

These instructions tell you what the users will see and what they need to do. They must:

1. Log on to the Sophos Self Service Portal using another computer.
2. Go to the Device Encryption page.
   A list of all computers where the user was the last one to be logged on is displayed. If someone else has logged on to a computer in the meantime, the user cannot regain access to this computer via the Self Service Portal.
3. Select a computer from the list and click the Retrieve button in the RECOVERY KEY column.
4. Start their own computer and go to the recovery page.
   • Windows: Press the Esc key to switch to the BitLocker recovery screen.
   • Mac: Click the question mark icon in the Password field to switch to the FileVault recovery page.
5. Enter the recovery key.

Sophos Bitlocker Recovery

Users can access their computer again.