SCCM Bitlocker recovry

Question

Hello,

We got sccm bitlocker solution in our environment. Bitlocker recovery keys and recovery package are stored in SCCM DB and are encrypted.

Q.

1. How could i retrieve bitlocker recovery package ?

For example my laptop crashes i get OS drive and want to retrieve data from broken OS.

i need to use bitlocker repair tool
https://learn.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-recovery-guide-plan#bitlocker-key-package

And access data using recovery key package

Answer 1

Hi @Eduards ,

To find the Bitlocker recovery key, you have to setup the web portal to easy manage and monitor the Bitlocker platform with ConfigMgr, for more details:

• Set up BitLocker portals

Or try using a simple query.

Regards,

---

Youssef Saad | New blog: https://youssef-saad.blogspot.com
Please remember to ** “Accept answer” ** for useful answers, thank you!

Answer 2

Try the below SQL query to get the recovery key

https://geekdudes.wordpress.com/2020/03/25/sccm-get-decrypt-bitlocker-recovery-keys-from-the-configmgr-database/

Self service - https://www.windows-noob.com/forums/topic/19921-how-can-you-use-the-self-service-feature-when-mbam-is-integrated-within-sccm/

Key Rotation - https://www.windows-noob.com/forums/topic/19925-how-does-key-rotation-work-in-the-bitlocker-managment-feature-in-configmgr/

Answer 3

Hi @Eduards ,

As YoussefSaad mentioned, we also could try using query to get BitLocker Recovery Keys from the ConfigMgr database in SCCM.

Here is the article about it, please refer it:
https://www.niallbrady.com/2019/05/26/how-can-i-get-recovery-keys-from-the-configmgr-database-in-sccm/
Note: the above links are not from MS, and just for your reference.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.