---
title: "Installing MBAM 2.5 May 2019 Hotfix & Confirming Encryption Key in MBAM"
canonical: "https://kb.uconn.edu/space/IKB/10767466497/Installing%20MBAM%202.5%20May%202019%20Hotfix%20%26%20Confirming%20Encryption%20Key%20in%20MBAM"
format: markdown
---
The Microsoft Windows 10 1903 release broke the Microsoft Bitlocker Administration and Monitoring (MBAM) agent. University IT professionals can install the hotfix.

> ⚠️ If your computers are in the Managed Workstation service, they will be patched automatically.

1. Install the **Hotfix **using either of the command line options listed below.
  - *MBAM2.5_Client_x64_KB4505175.exe /qn /AcceptEula=Yes*
  - *MBAM2.5_Client_x86_KB4505175.exe /qn /AcceptEula=Yes*
2. Force an MBAM-patched computer to escrow its recovery key to MBAM. The **PowerShell** script is located at **\\configmgr_dsl.grove.ad.uconn.edu\MBAM\2.5.**
3. Run Command:
4. To confirm that the Recovery Key has been created and sent to the MBAM database, you need to obtain the challenge code on a computer.
5. Open an elevated command or **PowerShell** prompt.
6. Run the command ***C:\windows\system32\manage-bde.exe -protectors c: -get***** **to return one of the following results:
  1. Numerical Password ID & Password.
  2. The first 8 digits of the **ID** are the challenge code (what a customer would be presented in **Bitlocker Recovery Mode**).
  3. The password is the 48 digit recovery key.
  4. No Numerical Password; only TPM information.
    1. This means the computer is encrypted but is not sending a recovery key to the MBAM database. Ensure that all requirements are met and that the hotfix is installed.
7. Run the PowerShell script ***Invoke-MbamClientDeployment.ps1*** to force key escrow.
8. Re-run the **manage-bde** command.
  1. No key protectors found.
    1. The computer is not encrypted. Ensure that all requirements are met.
    2. Check that the hotfix is installed.
    3. Ensure that encryption starts.
9. Access the recovery key on the MBAM server.
  1. To test that the recovery key is present in the MBAM database as a technician, navigate to the [MBAM 2.5 Server](https://mbam-2-primary.grove.ad.uconn.edu/Helpdesk).
  2. Log on with your **NetIDadmin **credentials.
  3. From the left-hand pane, choose **Drive Recovery**.
  4. In the right-hand pane, in the **Key ID** field, type the **first 8 digits** of the **Numerical ID** you obtained (example in the screenshot earlier is 5C7AB31B). Specify a reason for the drive unlock (this is a required field). Press **Submit.** The recovery key will appear in the console.

## Related Articles

> Macro (contentbylabel)

> Macro (details)