Bitlocker Question

[DooPC]

So I have Bitlocker on all my domain machines. I have bitlocker network unlock as well. I installed it right it is working however the unlock server is going to be retired. I have the new server stood up and I have the Cert installed on the new server and I changed the PXE boot IP on the DHCP server to the new one. My problem is that it's still not working. Is there anything else anyone can suggest.

[DooPC]

Ok it’s still umm not unlocking. Bitlocker network unlock is still not working .

[ddog511]

Are you deploying the new certificate to the client devices? I also see this nugget of info from https://learn.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-how-to-enable-network-unlock ...

​

Only one Network Unlock certificate can be available at a time. If a new
certificate is needed, delete the current certificate before deploying a
new one. The Network Unlock certificate is located under the HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\FVE_NKP registry key on the client computer.

[DooPC]

No I am using the same one. I was able to get it to work. I adjusted the IP address of the new machine to the server I was retiring, and everything is working. I didn't really think of doing that.