View BitLocker Information Outside of manage-bde

Get BitLocker information outside of manage-bde.

John Savill

February 6, 2015

1 Min Read
security guard

Q: How can I view in the registry the same information that's exposed through manage-bde?

A: The answer is that you can't. BitLocker status information isn't stored in the registry. Manage-bde actually interacts with WMI, specifically Win32_EncryptableVolume, for information about BitLocker. You can use manage-bde to find information about the encryption status of drives. The Microsoft TechNet article "Win32_EncryptableVolume class" includes a complete script example that outputs full BitLocker information, utilizing Win32_EncryptableVolume.

If you're using PowerShell, there are cmdlets built into PowerShell 4.0 that are specific to BitLocker. See the Microsoft TechNet article "BitLocker Cmdlets in Windows PowerShell." As an example, the following PowerShell code displays BitLocker information:

PS C:> get-bitlockervolume c: | flComputerName : SAVWIN01MountPoint : C:EncryptionMethod : Aes128AutoUnlockEnabled :AutoUnlockKeyStored : TrueMetadataVersion : 2VolumeStatus : FullyEncryptedProtectionStatus : OnLockStatus : UnlockedEncryptionPercentage : 100WipePercentage : 0VolumeType : OperatingSystemCapacityGB : 223.0537KeyProtector : {RecoveryPassword, Password}

About the Author

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like