I am trying to bind Bitlocker operations (specifically booting Windows) with some form of network presence. In other words, I want to set-up some form of 2FA (via the network) to allow booting Windows.
I speculate that providing the startup key via a named pipe is possible. Assuming this, I need to know 2 things:
- Is it possible to have some software started from the system drive, i.e. before Bitlocker starts Windows from the Operating System drive. This software would query some network service to somehow get the startup key.
- Is the network operates when the Bitlocker is doing its thing? In other words, is the network available during the System Drive phase.
Has anyone try this?