How to search Azure for bitlocker key with partial ID

Question

I have a pile of M2 hard disks removed from old/discarded PC's over the last couple of years.

I've now got a portable USB device to read/write to these devices, however, it has now come to light that they are 'protected' with bitlocker keys.

No problem, I thought, because all the devices we used to have are still in Azure.

But, we are talking about the ever helpful Microsoft!!!

When I attempt to 'look' at each device, it says: "Enter the 48-digit recovery key to unlock this drive (Key ID: *********)"

That ID is just 9 digits (I assume that is part of the recovery key query ID)

I have absolutely ZERO knowledge of the name of the device these were installed in (I joined AFTER these were removed) a year ago.

How do I search Azure/intune/Entra with a partial key to find the full Bitlocker key, to unlock these please?

Looking at every device installed in Azure is NOT an option.

Answer 1

Hello Larry-UK,

you can retrieve your BitLocker recovery key by following the steps in Finding your BitLocker recovery key in Windows - Microsoft Support.

Kind regards,

Lei

Answer 2

Hello Lei

Thank you for attempting to answer my post.

Your bio indicates that you are a Microsoft Agent/Moderator, therefore I thought you'd be more knowledgeable with Microsoft products!

My post clearly indicated that the devices I was trying to access were from 'other' computers, therefore would be protected with a different Bitlocker key.

In fact the PC I'm using is NOT protected with Bitlocker. This negates the use of whatever Bitlocker key my PC would have had.

I would obviously need the bitlocker key for the Windows device in which was installed where it was used.

This is the reason for me asking how to do that specific search.

Answer 3

Hello Larry-UK,

I apologize for any confusion. To search for a BitLocker recovery key with a partial ID in Azure, you can use the Azure Portal.

Go to the Azure Portal and navigate to the Recovery Services vault that contains the BitLocker recovery keys. Click on the "Backup items" tab and select "Azure Virtual Machines" or "Windows Servers" depending on the type of device you are looking for. Then, click on the "Protected Items" tab and search for the device using the partial ID.

Answer 4

Thank you for your additional reply.

For anyone else following this thread, you need to go to the PORTAL (not just Azure AD) Like it took me the best part of an hour to figure out.

Home - Microsoft Azure

Anyway, when I got there I was faced with: No recovery services vaults to display

When I started to look deeper, I thought SERIOUSLY? Are you kidding? You want me to set up what?

I just want to search through the information already in AAD and find a bit locker key!

Typical Microsoft! You seem to have to jump through a thousand hoops for one simple piece of information!

Forget it................. I'll find another way!

Answer 5

If you have this option, it should do the trick:

To search for Bitlocker key from unknown device name:

•  Go to Azure, Entra ID, Devices, Manage, Bitlocker
•  Devices - Microsoft Azure