Monday, 10 March 2014

BitLocker - Useful Tips Using Command Line on Bitlocker

BitLocker is Microsoft's built-in encryption tool commonly used in Windows Vista and Windows 7 operating systems. In this guide, I've compiled some useful tips on using BitLocker with command line, and remote access on BitLocker. Make sure you have access the command prompt as administrator first before performing the following command line for your BitLocker.


Check Bitlocker Encryption Status
cscript manage-bde.wsf -status

Check Bitlocker Encryption Status Remotely
cscript manage-bde.wsf -cn L12345657 -status
where L1234567 refers to Computer Name of the machine

Suspend BitLocker
cscript manage-bde.wsf -protectors -disable C:

Suspend BitLocker Remotely
cscript manage-bde.wsf -protectors -disable -cn L1234567 C:
where L1234567 refers to Computer Name of the machine

Turn On BitLocker
cscript manage-bde.wsf -protectors -enable C: 

Turn On BitLocker Remotely
cscript manage-bde.wsf -protectors -enable -cn L1234567 C:
where L1234567 refers to Computer Name of the machine
 
Resume Paused BitLocker
cscript manage-bde.wsf –resume c:


Resume Paused BitLocker Remotely   
cscript manage-bde.wsf -cn L1234567 –resume c:
where L1234567 refers to Computer Name of the machine

Decrypt BitLocker
cscript manage-bde.wsf –off c:

Decrypt BitLocker Remotely
cscript manage-bde.wsf -cn L1234567 –off c:

Get BitLocker Recovery Pin
cscript manage-bde.wsf -protectors c: -get

Get BitLocker Recovery Pin Remotely
cscript manage-bde.wsf -cn L1234567 -protectors c: -get


Taking Ownership of TPM Using Command Line

cscript manage-bde.wsf –tpm –takeownership -<password>

where <password>  should be replaced with your own choice of password
   
Alternative way to type command line for taking TPM Ownership in BitLocker:

cscript manage-bed.wsf –tpm –o –<password>
where <password>  should be replaced with your own choice of password