Powershell - Enable Bitlocker & Create recovery txt file output network directory

Question

Powershell - Enable Bitlocker & Create recovery txt file output network directory

Joshua Tyo 0

Hello,

I have been searching to try and find a PowerShell set of commands or script to enable bit locker on remote machine and save the text recovery file to a UNC network path. I do not want to lock requiring pin or text to start the PC; just to save the text recovery to a different UNC location.

Would a command like this work?

Get-BitLockerVolume | Enable-BitLocker -EncryptionMethod Aes128 -RecoveryKeyPath "\SERVER\SHARE" -RecoveryKeyProtector

Also by doing this is there a way to avoid reboot?

Any help or guidance would be appreciated!

Zachery Schwarz 0

I took Anja B's script and tested it. It does work after adding a file path. I made a few minor edits to simplify the code. Make sure to Swap out that Insert your file path here! with the location you want for saving these keys.

# Activate BitLocker on the C: drive Enable-BitLocker -MountPoint "C:" -RecoveryPasswordProtector -SkipHardwareTest # Get the BitLocker recovery key $recoveryKey = (Get-BitLockerVolume -MountPoint "C:").KeyProtector | Where-Object {$_.KeyProtectorType -eq 'RecoveryPassword'} # Save the recovery key to a file with computer name $keyFilePath = '*INSERT YOUR FILE PATH HERE!'+$env:COMPUTERNAME+'.txt' $recoveryKey.RecoveryPassword | Out-File -FilePath $keyFilePath Write-Host "BitLocker has been activated and the recovery key has been saved to $keyFilePath."

2 answers

Your answer

Zachery Schwarz 0 Reputation points

2024-11-12T14:45:19.1433333+00:00

I took Anja B's script and tested it. It does work after adding a file path. I made a few minor edits to simplify the code. Make sure to Swap out that Insert your file path here! with the location you want for saving these keys.

# Activate BitLocker on the C: drive Enable-BitLocker -MountPoint "C:" -RecoveryPasswordProtector -SkipHardwareTest # Get the BitLocker recovery key $recoveryKey = (Get-BitLockerVolume -MountPoint "C:").KeyProtector | Where-Object {$_.KeyProtectorType -eq 'RecoveryPassword'} # Save the recovery key to a file with computer name $keyFilePath = '*INSERT YOUR FILE PATH HERE!'+$env:COMPUTERNAME+'.txt' $recoveryKey.RecoveryPassword | Out-File -FilePath $keyFilePath Write-Host "BitLocker has been activated and the recovery key has been saved to $keyFilePath."

Answer 1

Anja B 15

I don't know about remote machines but I made this PS script work on local machines:

# Activate BitLocker on the C: drive
Enable-BitLocker -MountPoint "C:" -RecoveryPasswordProtector -SkipHardwareTest
# Get the BitLocker recovery key
$recoveryKey = (Get-BitLockerVolume -MountPoint "C:").KeyProtector | Where-Object {$_.KeyProtectorType -eq 'RecoveryPassword'}
# Save the recovery key to a file with computer name
$computerName = $env:COMPUTERNAME
$keyFileName = "${computerName}_Bitlocker.txt"
$keyFilePath = Join-Path -Path 
$recoveryKey.RecoveryPassword | Out-File -FilePath $keyFilePath
Write-Host "BitLocker has been activated and the recovery key has been saved to $keyFilePath."

Anja B 15 Reputation points

2024-03-28T16:37:48.9333333+00:00

I don't know if it is me or some forum rule editing the file path part out...

$keyFilePath = Join-Path -Path \Server\Share -ChildPath $keyFileName
DonH 5 Reputation points

2024-04-23T18:48:51.2633333+00:00

This script is great! Thank you, Anja B. I will be trying to use this with a PDQ Deploy remote install and will report back if I'm successful.

Answer 2

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Share via

Powershell - Enable Bitlocker & Create recovery txt file output network directory

2 answers

Your answer