Windows 10: Bitlocker lock/unlock batch

I want to make a batch to check if bitlocker is locked or unlocked on my D: partition.

'manage-bde -lock D:' to lock it and 'manage-bde -unlock D: password 123pass456' to unlock.

I can check its status by typing 'manage-bde -status D:'

Any help would help, I think if any 'grep" like command would help for the script to know if its locked or unlocked, and then any conditional, like 'if-else' to follow either the lock or the unlocked path. But i'm just guessing.

submitted by /u/RandyBobandyyyyyy
[link] [comments]

:)

 

HELP: Automatic BitLocker Unlock.

Thank you sir, ill try your solution.

Windows Auto unlock ONLY works in case you have Bitlocker on your system drive, because if your system drive is not encrypted auto unlocking other drives means loss of security.
But in my case my system drive is Encrypted with hardware encryption that i password unlock during boot. So auto unlocking Bitlocker drives will do fine for me.

 

Bitlocker locked on startup

Hi,

Thank you for posting your query on Microsoft Community.

Follow the below steps and check if it helps:

I suggest you to try the step under the section "To unlock removable data drive" in the following article:

http://windows.microsoft.com/en-US/windows-8/unlock-bitlocker-protected-drive

Note: The steps for Windows 8.1 applies to Windows 10 as well.

For further reference, ask OP to refer to the following article:

http://windows.microsoft.com/en-us/windows-8/bitlocker-drive-encryption

I hope this information helps.

Thank you.

 

HELP: Automatic BitLocker Unlock.

more clear
0down voteaccepted
I managed to figure out how to fix this. It doesn't use the native auto-unlock function like I was hoping (rather a script that unlocks using a .BEK file, as I mentioned) but it seems to work just as well.

First, you need to create a .BEK file that can unlock the disk. This is the command I used:

manage-bde -protectors -add d: -rk c:\

Substitute d: with whichever drive you want to auto-unlock. The output will look something like this (take note of the "external key file name"):

BitLocker Drive Encryption: Configuration Tool version 10.0.10011
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

Key Protectors Added:

Saved to directory c:\

External Key:
ID: {9DDF4900-5E08-479A-8C4C-6ADE2DA00551}
External Key File Name:
9DDF4900-5E08-479A-8C4C-6ADE2DA00551.BEK

Now you need to create the script to unlock the drive. Just create a batch file in the root directory with the following line:

manage-bde -unlock d: -rk C:\[external key filename]

Again, replace d: with the correct drive letter. Replace [external key filename] with the filename you got before.

Finally, you need to tell Windows to run this script at startup, before you log in. (Or at least I needed it to run then, because that's where my desktop, etc. are stored.) Here's how you do that:

• Press Win+R and enter gpedit.msc. (This is only in Pro, but so is BitLocker, so that's not an issue here.)
  
  
• On the left, navigate to Computer Configuration > Windows Settings > Scripts (Startup/Shutdown)
  
  
• Double-click "Startup" on the right
  
  
• Click "Add..." and select the batch file you created before.
  
  
• Click OK and exit Group Policy Editor.
  

Now you can reboot the computer to test it. You should see your drive automatically unlocked