[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-seo-283648-105":53,"doc-detail-283648-en":127},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":54,"data":55},"ok",{"site_id":56,"language":57,"slug":58,"title":59,"keywords":60,"description":61,"schema_data":62,"social_meta":120,"head_meta":122,"extra_data":124,"updated_unix":126},105,"en","configure-network-unlock-step-by-step-guide","Configure Network Unlock - Step-by-Step Guide","","This guide walks an administrator through configuring BitLocker Network Unlock in a Windows domain with a Domain Functional Level of Windows Server 2012 or higher. It covers installing and validating the WDS Server role and service, installing the Network Unlock feature, and creating the required Network Unlock certificates. The document then explains exporting public certificates (and optionally private keys), deploying a certificate and private key to the WDS server, and finishing with Group Policy configuration so target computers can unlock using the Network Unlock key.",{"@graph":63,"@context":119},[64,80,102],{"@type":65,"itemListElement":66},"BreadcrumbList",[67,71,74,77],{"item":68,"name":69,"@type":70,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":72,"name":10,"@type":70,"position":73},"https://docshare.wps.com/template/",2,{"item":75,"name":11,"@type":70,"position":76},"https://docshare.wps.com/template/presentations/",3,{"item":78,"name":59,"@type":70,"position":79},"https://docshare.wps.com/template/configure-network-unlock-step-by-step-guide/283648/",4,{"url":78,"name":59,"@type":81,"image":82,"author":87,"headline":59,"publisher":90,"fileFormat":93,"inLanguage":57,"description":61,"dateModified":94,"datePublished":95,"encodingFormat":93,"isAccessibleForFree":96,"interactionStatistic":97},"DigitalDocument",{"url":83,"@type":84,"width":85,"height":86},"https://docshare.wps.com/thumbnails/configure-network-unlock-step-by-step-guide/283648.png","ImageObject",442,249,{"name":88,"@type":89},"Eden","Person",{"url":68,"name":91,"@type":92},"DocShare","Organization","application/pdf","2026-10-27","2026-09-17",true,{"@type":98,"interactionType":99,"userInteractionCount":101},"InteractionCounter",{"@type":100},"ViewAction",19,{"@type":103,"mainEntity":104},"FAQPage",[105,111,115],{"name":106,"@type":107,"acceptedAnswer":108},"What prerequisites are required to configure Network Unlock in a domain?","Question",{"text":109,"@type":110},"The domain must have a Domain Functional Level of at least Windows Server 2012 so Network Unlock can be configured with the required features.","Answer",{"name":112,"@type":107,"acceptedAnswer":113},"How can the WDS server role and service be installed and verified?",{"text":114,"@type":110},"Install the WDS deployment role (or select it in Server Manager) and verify the Windows Deployment Services service is running using the Services console or PowerShell (e.g., Get-Service WDSServer).",{"name":116,"@type":107,"acceptedAnswer":117},"How do you create and use Network Unlock certificates?",{"text":118,"@type":110},"Network Unlock can use certificates from an existing PKI infrastructure or a self-signed certificate. In both cases you export the public certificate (to .cer), and export the certificate with the private key (to .pfx) when needed, then deploy/import them to the WDS server before configuring Group Policy to enable unlocking on target computers.","https://schema.org",{"og:url":78,"og:type":121,"og:title":59,"og:site_name":91,"og:description":61},"article",{"robots":123,"canonical":78},"index,follow",{"doc_id":125,"site_id":56},283648,1791743524,{"code":4,"msg":5,"data":128},{"doc_id":125,"user_id":129,"nickname":88,"user_avatar":130,"doc_module":9,"category_id":8,"category_name":11,"doc_title":59,"doc_description":61,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":101,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":136,"language":137,"language_code":57,"site_id":56,"html_lang":57,"table_of_contents":138,"faqs":139,"seo_title":140,"seo_description":61,"update_tm":141,"read_time":79},1374391974468,"https://ap-avatar.wpscdn.com/davatar_29158cc5080c5b710cf443261637dec0","Configure Network Unlock  \nThe following steps allow an administrator to configure Network Unlock in a domain where the Domain Functional Level is at least Windows Server 2012.  \nStep One: Install the WDS Server role  \nThe BitLocker Network Unlock feature will install the WDS role if it is not already installed. If you want to install it separately before you install BitLocker Network Unlock you can use Server Manager or Windows PowerShell. To install the role using Server Manager, select the Windows Deployment Services role in Server Manager.  \nTo install the role using Windows PowerShell, use the following command:  \nInstall-WindowsFeature WDS-Deployment  \nYou must configure the WDS server so that it can communicate with DHCP (and optionally Active Directory Doman Services) and the client computer. You can do using the WDS management tool, wdsmgmt.msc, which starts the Windows Deployment Services Configuration Wizard.  \nStep Two: Confirm the WDS Service is running  \nTo confirm the WDS service is running, use the Services Management Console or Windows PowerShell. To confirm the service is running in Services Management Console, open the console using services.msc and check the status of the Windows Deployment Services service.  \nTo confirm the service is running using Windows PowerShell, use the following command:  \nGet-Service WDSServer  \nStep Three: Install the Network Unlock feature  \nTo install the Network Unlock feature, use Server Manager or Windows PowerShell. To install the feature using Server Manager, select the BitLocker Network Unlock feature in the Server Manager console.  \nTo install the feature using Windows PowerShell, use the following command:  \nInstall-WindowsFeature BitLocker-NetworkUnlock  \nStep Four: Create the Network Unlock certificate  \nNetwork Unlock can use imported certificates from an existing PKI infrastructure, or you can use a self-signed certificate.  \nTo enroll a certificate from an existing certification authority (CA), do the following:  \n1. Open Certificate Manager on the WDS server using certmgr.msc  \n2. Under the Certificates-Current User item, right-click Personal  \n3. Select All Tasks, then Request New Certificate  \n4. Select Next when the Certificate Enrollment wizard opens  \n5. Select Active Directory Enrollment Policy  \n6. Choose the certificate template created for Network Unlock on the Domain controller and select Enroll. When prompted for more information, add the following attribute to the certificate:  \no Select the Subject Name pane and provide a friendly name value. It is suggested that this friendly name include information for the domain or organizational unit for the certificate. For example \"BitLocker Network Unlock Certificate for Contoso domain\"  \n7. Create the certificate. Ensure the certificate appears in the Personal folder.  \n8. Export the public key certificate for Network Unlock  \n1. Create a .cer file by right-clicking the previously created certificate, choosing All Tasks, then Export.  \n2. Select No, do not export the private key.  \n3. Select DER encoded binary X.509 and complete exporting the certificate to a file.  \n4. Give the file a name such as BitLocker-NetworkUnlock.cer.  \n9. Export the public key with a private key for Network Unlock  \n0. Create a .pfx file by right-clicking the previously created certificate, choosing All Tasks, then Export.  \n1. Select Yes, export the private key.  \n2. Complete the wizard to create the .pfx file.  \nTo create a self-signed certificate, do the following:  \n1. Create a text file with an .inf extension. For example, notepad.exe BitLocker  \nNetworkUnlock.inf  \n2. Add the following contents to the previously created file:  \n3. [NewRequest]  \n4.  \n5. Subject=\"CN=BitLocker Network Unlock certificate\"  \n6. Exportable=true  \n7. RequestType=Cert  \n8. KeyUsage=\"CERT_KEY_ENCIPHERMENT_KEY_USAGE\"  \n9. KeyLength=2048  \n10.  \n11. [Extensions]  \n12. 1.3.6.1.4.1.311.21.10 = \"{text}\"  \n13. _continue_ = \"OID=1 .3 .6 .1 .4 .1 .311 .67 .1 .","cbCaivlY5dIwRXjg","https://ap.wps.com/l/cbCaivlY5dIwRXjg","pdf",408516,10,"English","# Step One: Install the WDS Server role\n## Install and configure WDS for DHCP (and optionally Active Directory)\n# Step Two: Confirm the WDS Service is running\n## Validate via Services console or PowerShell\n# Step Three: Install the Network Unlock feature\n# Step Four: Create the Network Unlock certificate\n## Use an existing CA and request a certificate\n## Create a self-signed certificate using certreq and an INF file\n## Export public key certificates to .cer and .pfx as needed\n# Step Five: Deploy the private key and certificate to the WDS server\n## Import the .pfx into the local computer certificate store\n# Step Six: Configure Group Policy settings for Network Unlock\n## Deploy the public certificate to unlock-capable computers","[{\"question\":\"What prerequisites are required to configure Network Unlock in a domain?\",\"answer\":\"The domain must have a Domain Functional Level of at least Windows Server 2012 so Network Unlock can be configured with the required features.\"},{\"question\":\"How can the WDS server role and service be installed and verified?\",\"answer\":\"Install the WDS deployment role (or select it in Server Manager) and verify the Windows Deployment Services service is running using the Services console or PowerShell (e.g., Get-Service WDSServer).\"},{\"question\":\"How do you create and use Network Unlock certificates?\",\"answer\":\"Network Unlock can use certificates from an existing PKI infrastructure or a self-signed certificate. In both cases you export the public certificate (to .cer), and export the certificate with the private key (to .pfx) when needed, then deploy/import them to the WDS server before configuring Group Policy to enable unlocking on target computers.\"}]","Configure Network Unlock - Step-by-Step Guide | PDF",1789615662]