Friday, December 21, 2012 2:01 PM
I have machines that I am deploying Win 7. I want to encrypt the OS volume using bit locker. As part of future upgrades I want to boot to a usb stick in the Winpe environment. I then would like to unlock the OS drive (while still in Winpe) and do the upgrade. Also I just want to use the tpm password and not have to save a security key to a file. Can anyone tell me if this is possible?
Tuesday, December 25, 2012 2:37 AMModerator
Based on my research, I suggest you try the following steps to unlock an encrypted volume.
Type the following command at a command prompt, and then press ENTER:
cscript %systemroot%\system32\manage-bde.wsf –unlock Volume : -rk PathToExternalKeyFile: \ External Key File Name
For example, if you want to unlock volume D and if you have stored the Recovery Key on the drive J, type the following command at the command prompt, and then press ENTER:
cscript %systemroot%\system32\manage-bde.wsf –unlock D: -rk J:\ External Key File Name
Note The external key file name is listed in the script output.
If the Recovery Key is damaged or missing, you can still unlock the volume. To do this, type the following command at the command prompt:
cscript %systemroot%\system32\manage-bde.wsf –unlock Volume : -rp Numeric Recovery Password
Note The numeric Recovery Password is listed in the script output.
For more information, please refer to the following article:
Hope this helps.
TechNet Community Support
- Marked As Answer by althurm Friday, December 28, 2012 4:18 PM
Friday, December 28, 2012 4:18 PMok it was the numeric recovery pw i should have been using thanks!