Is there a way to retrieve RecoveryPassword by checking generate history, or regenrate identical RecoveryPassword based on the same machine(same system\TPM\Key ID\SID\Hardware\privilege)?

Question

Hey, I need help here, I use scripts to enable user Bitlocker in the backgroud.

One on the step in scripts use comand :"manage-bde -protectors -add f: -RecoveryPassword" for adding a RecoveryPassword keyprotector for a USB driver (F:) but no backup actions.

However , User removed the USB drive during the Bitlocker encrypting progress and rebooted the machine.

And we lost 48-digitalRecoveryPassword and Date in the F drive, when I replug in the drive and try to access F: drive, system asks me to input RecoveryPassword.

And I was not luck in after following the guide https://support.microsoft.com/en-us/windows/finding-your-bitlocker-recovery-key-in-windows-6b71ad27-0b89-ea08-f143-056f5ab347d6

My question is : Is there a possible way to retrieve RecoveryPassword by checking generate history, or regenerate identical RecoveryPassword based on the same machine(same system\TPM\Key ID\SID\Hardware\privilege)?

Answer 1

Hello

Thank you for your question and reaching out. I can understand you are having issues related to BitLocker Recovery key.

I am afraid that there is no way to retrieve Bitlocker key from History , However if you have Integrated with AD or any other End Point tools like Manage Engine then you can retrieve it from from their portal or AD MMC console.

References :

https://learn.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-use-bitlocker-recovery-password-viewer
https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/bitlocker-recovery-password-viewer-tool

-------------------------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--