Merge pull request #6861 from aczechowski/cz-2203tp-10454717-blmts

add 2203tp content for 10454717 (BitLocker task sequence)

Author: Angela Fleischmann

memdocs/configmgr/core/get-started/2022/includes/2203/10454717.md

@@ -1,13 +1,42 @@
 ---
-author: mestew
-ms.author: mstewart
+author: aczechowski
+ms.author: aaroncz
 ms.prod: configuration-manager
 ms.technology: configmgr-core
 ms.topic: include
 ms.date: 03/01/2022
 ms.localizationpriority: medium
 ---
 
-## <a name="bkmk_anchor"></a> Feature Name
-<!--CMADO#-->
+## <a name="bkmk_blmts"></a> Escrow BitLocker recovery password to the site during a task sequence
 
+<!--10454717-->
+
+You can now configure the **Enable BitLocker** step of a task sequence to escrow the BitLocker recovery information for the OS volume to Configuration Manager. Previously, you had to escrow to Active Directory, or wait for the Configuration Manager client to receive BitLocker management policy after the task sequence. This new option makes sure that the device is fully protected by BitLocker when the task sequence completes, and that you can recover the OS volume immediately.
+
+For more general information, see [Plan for BitLocker management](../../../../../protect/plan-design/bitlocker-management.md).
+
+### Prerequisites for escrowing BitLocker recovery password during a task sequence
+
+The client will only escrow its key to the Configuration Manager site if you configure one of the following options:
+
+- Create and use a certificate to encrypt the site database for BitLocker management.
+
+- Enable the BitLocker client management policy option to **Allow recovery information to be stored in plain text**.
+
+For more information, see [Encrypt recovery data in the database](../../../../../protect/deploy-use/bitlocker/encrypt-recovery-data.md).
+
+### Try it out!
+
+Try to complete the tasks. Then send [Feedback](../../../../understand/product-feedback.md) with your thoughts on the feature.
+
+1. If needed, first [create a task sequence to deploy an OS](../../../../../osd/deploy-use/manage-task-sequences-to-automate-tasks.md).
+
+1. [Use the task sequence editor](../../../../../osd/understand/task-sequence-editor.md) to edit the task sequence.
+
+1. If the task sequence doesn't already include the **Enable BitLocker** step, add it. For more information, see [About task sequence steps: Enable BitLocker](../../../../../osd/understand/task-sequence-steps.md#BKMK_EnableBitLocker).
+
+1. On the properties of the **Enable BitLocker** step, select the option to **Automatically store the recovery key**, and then select **The Configuration Manager database**.
+
+    > [!NOTE]
+    > If Configuration Manager can't escrow the key, by default this task sequence step fails.