Questions tagged [bitlocker]

full disk encryption feature included with select editions of Windows Vista and later

BitLocker (codenamed Cornerstone and formerly known as Secure Startup) is a full disk encryption feature included with select editions of Windows Vista and later. It is designed to protect data by providing encryption for entire volumes.

139 questions
2
votes
0 answers

Can't add password not pin protection to TPM device with BitLocker

I have to activate BitLocker on a TPM device with password. The first thing I did was to activate “Require Additional Authentication at Startup” from the GPO. Then I right clicked C: to activate BitLocker. The first step on a BitLocker activation is…
2
votes
1 answer

How to find out if azure vm has KEK or BEK Encryption?

Is there nay powershell command by using which I can find out if the VM is KEK encrypted or BEK encrypted? Also can I move a VM after decrypting it across subscription?
Anmol001
  • 35
  • 4
2
votes
2 answers

Get the output of .exe file in Python3 on Windows

I've been trying to get the output of the following command 'manage-bde -status' which works fine on my windows cmd commande prompt, but by using a python program.The same command doesn't work on python subprocess, so I had to launch the…
Mathibear
  • 65
  • 2
  • 7
2
votes
1 answer

Impossible to set TPM+PIN mode for Bitlocker (0x80310060)

I'm trying to protect our Win10Pro Dell laptops using Bitlocker. We'd like to add the initial PIN request. We are following a lot of online articles enabling the Require additional authentication at startup key and setting Configure TPM startup Pin…
SteMMo
  • 392
  • 1
  • 4
  • 23
2
votes
3 answers

Determine Bitlocker version with PowerShell

I am trying to determine if BitLocker is updated. All I can find on BitLocker is if the service is running as in: Get-Service -name "BDESVC*" Usually the gwmi -class Win32_SoftwareFeature will return all applications versions but BitLocker isn't…
1
vote
1 answer

Receiving an error when trying to backup bitlocker key to Azure AD with PowerShell

We are trying to create a script within our environment to upload bitlocker keys to Azure AD using powershell and BackupToAAD-BitLockerKeyProtector But we receive an error message on all PCs we have tried so far, error…
zyntrax
  • 88
  • 9
1
vote
2 answers

Azure Disk Encrption - Key vault secret wrap with key encryption key failed

When I try to enabled Azure Disk Encryption on an Azure Windows Server 2022 VM I get the following error: *Failed to enable Azure Disk Encryption on the VM with the following exception…
ozo
  • 21
  • 4
1
vote
0 answers

Detect BitLocker status WITHOUT admin from a service

After following this post I was able to detect bitlocker without admin permissions, debugging in Visual Studio works fine and running my program standalone is also fine. However, my program runs as a service normally and when ran as a service it…
1
vote
1 answer

Trying to back up my Bitlocker Key to ADDS Through Script

I'm trying to automatize the process of storing BitLocker Keys to ADDS. I wanna be able to run the following script at logon, in order to do that, as the OS is deployed through WDS which already encrypts the drive: $BitVolume = Get-BitLockerVolume…
1
vote
0 answers

Managing Bitlocker encryption on C#

I need to manage (short for "enable and then immediately disable") bitlocker encryption on removable drives. Bitlocker is enforced by company policy, but in order to release to customers their USB installation drives I need to encrypt the drives,…
1
vote
1 answer

Graph's API bitlocker/recoveryKeys calls return less than a handful of keys per call

I have been following a couple of solutions to retrieve a list of Azure AD registered BitLocker keys using the MS Graph API. The code I am using is: $AzureTokenURI = "https://login.microsoftonline.com/$TenantID/oauth2/v2.0/token" $BitlockerURI =…
1
vote
2 answers

Verify a function in PowerShell has run succesfully

I'm writing a script to backup existing bit locker keys to the associated device in Azure AD, I've created a function which goes through the bit locker enabled volumes and backs up the key to Azure however would like to know how I can check that the…
Russeller
  • 55
  • 7
1
vote
0 answers

change password Bitlocker with script

I'm looking for a script that changes a password in a bit locker without user intervention, if I run manage-bde - changepassword c: ask me to type a password and it's not good for me, I want to enter everything in the script, vbs or c # or api
1
vote
1 answer

I have an issue with "Hashcat" error "Bitlocker" hash

I have a hash file from the image, my device is Surface Pro BitLocker encrypted image Recovery Key hash…
1
vote
1 answer

BitLocker metadata for the encrypted drive is not valid (0x80310010)

I'm moving an external drive to a new computer. The drive is protected with Bitlocker, but I can unlock it and view the contents. However, when I try to configure auto-unlock I see: C:\>manage-bde -autounlock -enable d: BitLocker Drive Encryption:…
Aaron Queenan
  • 851
  • 8
  • 14
1
2
3
9 10