Device BitLocker Key Rotation Action

This guide will show an administrator how to remove outdated encryption keys on a registered device through Intune.

Role Requirements

Procedure Scope: Administrators

Required Group Membership: Admin.Security

Handbook Reference

Package: TBD

Domain: TBD

Modifies: TBD

Device BitLocker Key Rotation Initiation

1. Navigate to the All Devices – Intune portal, locate and select the desired device from the list.
   
2. From the device Overview page, locate and select the three dots to expand the available device actions for the machine. Select the BitLocker Key Rotation action from the generated list.
   
3. A prompt will generate asking if you are sure you want to follow through with doing a key rotation on the device, select Yes to complete the BitLocker key rotation action initiation process.