Windows 10: How can I tell if Bitlocker is activated without the manage-bde tool

Hello,

I'm devellopping an app that can automatically collect general information about a windows system, and I would like to add information about Bitlocker. I would like to know if there is way to tell if Bitlocker is activated without using the manual command 'manage-bde -status', per exemple by reading a value in a file, or something like this. I still can read the output of 'manage-bde status' but if it changes after an update, my process will not work anymore.

Thanks in advance for your help !

:)

 

My question is about bitlocker.

Hi,

To address your concern, You can try unlocking the hard drives through the elevated command prompt by following the steps below.

Unlock Drive using a Password

• Open command prompt as administrator.
• Type the commands below. You will not be able to see the password while typing it in.

manage-bde -unlock D: -password (for the D drive)

manage-bde -unlock F: -password (for the F drive)

3. Hit Enter key after typing in each command.

Unlock Drive using the Bitlocker Recovery Key

• Open command prompt as administrator.
• Type the commands below.

manage-bde -unlock D: -rp BitLocker Recovery Key (for the D drive)

manage-bde -unlock F: -rp BitLocker Recovery Key (for the F drive)

3. Hit Enter key after typing in each command.

Let us know how it goes.

Regards.

 

BitLocker

Hi,

It's impossible to disable Bitlocker, the option to disable doesn't exist and even using tools like manage-bde or repair-bde i'm not able to manage or disable the drive encryption.

Tks in advance

 

HELP: Automatic BitLocker Unlock.

more clear
0down voteaccepted
I managed to figure out how to fix this. It doesn't use the native auto-unlock function like I was hoping (rather a script that unlocks using a .BEK file, as I mentioned) but it seems to work just as well.

First, you need to create a .BEK file that can unlock the disk. This is the command I used:

manage-bde -protectors -add d: -rk c:\

Substitute d: with whichever drive you want to auto-unlock. The output will look something like this (take note of the "external key file name"):

BitLocker Drive Encryption: Configuration Tool version 10.0.10011
Copyright (C) 2013 Microsoft Corporation. All rights reserved.

Key Protectors Added:

Saved to directory c:\

External Key:
ID: {9DDF4900-5E08-479A-8C4C-6ADE2DA00551}
External Key File Name:
9DDF4900-5E08-479A-8C4C-6ADE2DA00551.BEK

Now you need to create the script to unlock the drive. Just create a batch file in the root directory with the following line:

manage-bde -unlock d: -rk C:\[external key filename]

Again, replace d: with the correct drive letter. Replace [external key filename] with the filename you got before.

Finally, you need to tell Windows to run this script at startup, before you log in. (Or at least I needed it to run then, because that's where my desktop, etc. are stored.) Here's how you do that:

• Press Win+R and enter gpedit.msc. (This is only in Pro, but so is BitLocker, so that's not an issue here.)
  
  
• On the left, navigate to Computer Configuration > Windows Settings > Scripts (Startup/Shutdown)
  
  
• Double-click "Startup" on the right
  
  
• Click "Add..." and select the batch file you created before.
  
  
• Click OK and exit Group Policy Editor.
  

Now you can reboot the computer to test it. You should see your drive automatically unlocked