Ok so I want to use the Data recovery Agent feature in bitlocker. I enable the setting in the domain policy. Do I have to import the DRA certificates into the policy before I encrypt drives in the company or can I add these afterwards?

Hi, Based on my research, you should import the certificates to the policy and configure relevant settings before encrypting the drives. For more information about DRA, please refer to the link below: Using Data Recovery Agents with BitLocker Thanks, Novak