Then, when you run the command below it will save a. BEK file in, for example f:\folder: manage-bde -protectors -add d: -RecoveryKey f:\folder If missing, you can add a Recovery Key to the drive with the command below, BEK key file you need an "External Key" protector These two Protectors are not mandatory, so your drive may not have one assigned. You’ll see the 48-digit password that is the BitLocker recovery key under "Numerical Password":Ī "Recovery Key" or "Startup Key" has a corresponding "External Key", To see the available types, run: manage-bde -protectors d: -get The problem may be that the BitLocker drive just does not have a Recovery Keyīitlocker can unlock your drive with various types of Protectors such as I don't have a microsoft account tied to it.
How do I get the recovery key? This is a server OS, so I did this all while logged on as administrator. If I look into manage bitlocker control panel I don't see "backup your recovery key" All keys matching your query are displayed.
On the Find BitLocker recovery keys page, enter at least the first four digits of the BitLocker recovery key ID in the Search name field and click Find Now. Then I waited several days and now it says PS C:\> manage-bde -status d:īitLocker Drive Encryption: Configuration Tool version Ĭopyright (C) 2013 Microsoft Corporation. On the Recovery type page, select BitLocker Recovery key ID (managed) and click Next. Why? Anyway I made it using these commands instead: manage-bde -protectors -add d: -startupkey e: (e: being the flash drive) Weirdly the wizard did not offer me to use USB flash to store the key when enabling bitlocker on D drive (6TB), but it DID show this option for drive C.
I cannot use TPM, because there is no w2k12 driver for that module which fits my motherboard, so I used USB flash to store the key. I have a w2k12 system on which I enabled bitlocker on my D: drive.