manage-bde

Overview

Configuration and management script for BitLocker

Usage Guide

manage-bde starts, stops and runs administrative tasks on BitLocker. It is a Windows script that is the command line equivalent to the BitLocker Control Panel applet.

manage-bde supports sixteen sub-commands:

• cscricscript %systemroot%\system32\manage-bde.wsf-status - returns BitLocker status information for all drives on the machine.
• cscript %systemroot%\system32\manage-bde.wsf -on - encrypts the drive and turns on BitLocker.
• cscript %systemroot%\system32\manage-bde.wsf -off - decrypts the drive and turns off BitLocker.
• cscript %systemroot%\system32\manage-bde.wsf -pause - Pauses encryption and decryption.
• cscript %systemroot%\system32\manage-bde.wsf -resume - resumes encryption and decryption.
• cscript %systemroot%\system32\manage-bde.wsf -lock - locks BitLocker encrypted data
• cscript %systemroot%\system32\manage-bde.wsf -unlock - unlocks NotLocker encrypted data
• cscript %systemroot%\system32\manage-bde.wsf -autounlock - configures automatic unlocking of BitLocker encrypted data.
• cscript %systemroot%\system32\manage-bde.wsf -protectors - configures BitLocker protectors, options are add, delete, enable, disable, get and adbackup.
• cscript %systemroot%\system32\manage-bde.wsf -tpm - configures the Trusted Platform Module (TPM). TPM is a hardware chip on some machines that provides key encryption functionality.
• cscript %systemroot%\system32\manage-bde.wsf -setidentifier - sets the drive identifier to a value specified in group policy at the Provide the unique identifiers for your organisation setting.
• cscript %systemroot%\system32\manage-bde.wsf -forcerecovery - Sets the BitLocker encrypted drive to recovery mode on reboot. Once this is executed only the recovery password or recovery key can be used to unlock the drive.
• cscript %systemroot%\system32\manage-bde.wsf -changepassword - changes the drive password.
• cscript %systemroot%\system32\manage-bde.wsf -changepin - changes the PIN for the operating system drive.
• cscript %systemroot%\system32\manage-bde.wsf -changekey - changes the start-up key for the operating system drive.
• cscript %systemroot%\system32\manage-bde.wsf -upgrade - upgrades BitLocker to a higher version.

Tool Data

Results for Tools search

You entered the search string "".
No results were returned for this string.