Currently, Symantec Endpoint Encryption for Bitlocker (SEE BL) will manage the recovery for machines encrypted with Bitlocker. BitLocker To Go for USB\external drive encryption is not fully supported though it has the capability to do so.
If the BitLocker GPO is configured to encrypt external drives, SEE BL may not capture the recovery data for server management. If this is the case and the passphrase is not known, the data on those external drives will be locked.
A Feature Request has been made to fully support BitLocker To Go drives so that the recovery keys are sent to the server as well as fully supporting/certifying Bitlocker To Go.
Symantec Corporation is committed to product quality and satisfied customers. Technical Support filed a Feature Request to add the functionality listed above. This Feature Request is currently being considered by Symantec Corporation to be addressed in a forthcoming version of the product.
There is no guaranteed date for this request from the Encryption Product Management team, or the Encryption Engineering team at this time. Please be sure to refer back to this article periodically as any changes to the status of the request will be reflected here. You can also subscribe to this article to receive notification when it is updated.
To have your organization added to the list of companies that desire this Feature Request, please contact technical support.
Warning: Symantec recommends upgrading to SEE 11.2.1 MP1 or above for Bitlocker management. For more information on this, see article TECH236640.