7- Install MBAM Client
In order the device could communicate with MBAM server, we need to install mbam client on each devices.
1-You can use SCCM to create application and deploy to all your devices.
2- Manually install the client on Device
8- Powershell Script to Encrypt & Escrow key
Microsoft has a powershell script which you can use it to start the encryption and escrow the key to the MBAM server.
Download the PS script: Download LINK
YOU need to specify your mbam server url link in the script or you can call it as parameter when running the PS script.
9- SCCM Task Sequence
For automation, you can use sccm task sequence, and add the MBAM client and MBAM script, and deploy it to your Device collection.