none
winpe and Get-MbamBitLockerRecoveryKey

    Question

  • Greetings,

      We are currently using a complicated vbscript to retrieve a recovery key during the winpe phase so that we can unlock a bitprotected drive (cannot use disable bitlocker as its in winpe).

      I noticed that there is a powershell cmdlet to retrieve the recovery key but cannot find any doco on where the module is that has this cmdlet and how to run it.

      Anyone used this?

    Cheers

    David Z

    Wednesday, October 09, 2013 12:44 AM

All replies

  • Any Luck on this command in WindowsPE for you if so please describe your process.
    Thursday, July 23, 2015 6:28 PM
  • In CustomSettings.ini you can define where your recovery key is stored.

    For example this would store the key in Active Directory and in a file. The path is declared in the BDEKeyLocation

    OSDBitLockerMode=TPM
    OSBBitLockerCreateRecoveryPassword=AD
    OSDBitLockerWaitForEncryption=FALSE
    BDEInstall=TPM
    BDEInstallSuppress=NO
    BDEWaitForEncryption=False
    BDERecoveryKey=AD
    BDEKeyLocation=\\SERVER\SHARE$\BLKeys

    If you aren't joining a domain it's fine as the key will still be saved to the Location path.


    If this post is helpful please vote it as Helpful or click Mark for answer.

    Thursday, July 23, 2015 7:15 PM
  • What about with a MBAM Server?

    http://www.windows-noob.com/forums/index.php?/topic/4173-how-can-i-retrieve-my-bitlocker-recovery-key-from-mbam-in-windows-pe/

    This is what I am using but having some struggles.

    Thursday, July 23, 2015 7:37 PM
  • Nothing wrong with using MBAM. But what are your struggles? Is it not saving the key to a file or not saving it to AD?

    This may help as well - https://technet.microsoft.com/en-us/library/cc766015(v=ws.10).aspx


    If this post is helpful please vote it as Helpful or click Mark for answer.

    Thursday, July 23, 2015 8:40 PM