Finding BitLocker Keys in Intune/AD

Issue/Question

How to find BitLocker Recovery Keys in Intune or Active Directory

Environment

Intune and Active Directory

Resolution

Active Directory

Please be sure you have the BitLocker RSAT module is installed. The PowerShell command to install this is below.

Add-WindowsCapability -Online -Name "Rsat.BitLocker.Recovery.Tools~~~~0.0.1.0"

Right click on a machine in AD and select Properties. Once in the properties window, you should see a tab named BitLocker Recovery.

Uploaded image

Once in the BitLocker Recovery tab, the recovery password is listed below where the red lines are.

Uploaded image

Intune

Browse to a machine in Intune. Once there, you will see a tab on the left called BitLocker recovery keys.

Uploaded image

Once inside the BitLocker recovery keys tab, select Show Recovery Key to get the password.

Uploaded image

Once Show Recovery Key is selected, you'll get a pop up to the right showing the recovery key info. Click the little eye to reveal the Recovery Key.

Uploaded image

Cause