There are two different use cases where either an end-user or a system administrator needs to find the Bitlocker recovery key. To find the recovery key, the details are available for registered devices in the Azure AD Management Portal. It could be your internal hard drive partition for example. The Recovery Key is stored in Azure AD when joining a device to Azure AD and by activating Bitlocker. If you have saved BitLocker recovery key for more than one devices, you will have to identify the correct recovery key for the device you are trying to recover. Step 3Īfter you successfully login and authenticate yourself, you will see recovery keys displayed on the screen.
If the PC is not your trusted PC, the page will ask you to authenticate your login by entering a pin code sent to your email or by any other way you may have set (Using Google’s Authenticator app, for example).
Go to and log in with the same Microsoft account credentials you use to log into your Windows 8/8.1 or Windows 10 PC.
How to Find BitLocker Recovery Key Step 1
Step 4: Click OK to format the BitLocker encrypted drive. Step 2: Right-click on the drive or partition and click on Format. Step 1: Press Win + X, K to open Disk Management.
I tested this on an Azure AD joined device. How to Remove BitLocker without password or recovery key on PC. Microsoft recently added a new preview ability to the production version of ConfigMgr 2107. Windows does not store any recovery information by itself. Retrieve BitLocker recovery keys from Tenant attached devices in the MEM console. Your recovery key is the recovery key with a Device Name that matches the Recovery key ID on the recovery prompt. Click Manage, and then select Get BitLocker recovery keys to get the key. Note: You must have saved your BitLocker recovery key to your Microsoft Account manually. Click All Devices, locate the device name that matches the computer with the encryption issue, and then click Show details. I never encrypt the laptop and it should be automatically encrypted by windows 10. Then when starting the laptop, a bitlocker recovery key is required. Because of some hardware issue, the technician replaced the motherboard of my laptop. Once the user profile appears, select Devices > Change the View drop down box to Devices > Select the computer Hostname (in my case it was DESKTOP-QM6QLOH) > Select View Details in the bottomĤ.Related: Looking for a new external hard drive? Have a look at the best deals and grab one at discounted rates. How to find bitlocker recovery key from Azure Active. And any cloud-first forward-thinking company will likely be looking to escrow the existing and future recovery keys for BitLocker to Azure AD / Microsoft Endpoint Manager Intune. Select Users at the top then search and select the user that the computer is assigned to. The Microsoft Bitlocker Administration and Monitoring tools have gone out of mainstream support. Azure Active Directory is currently in the classic portal so login here: with your credentials and select your Active Directory NameĢ. Below are the steps on how to access the key in AzureAD in the event the computer is prompted for it.Īccessing the BitLocker Recovery Key in Azure Active Directoryġ.
Now select the Drive Encryption Preference > Next > Select the Drive Encryption Mode > Next > Start EncryptingĪt this point, the encryption process on your hard drive should now begin and the BitLocker recovery key has been stored in Azure Active Directory. Select Save to your cloud domain accountĤ. You will be prompted to choose where you want to save your recovery key. Access the BitLocker menu by clicking on the Windows Icon > Type in Bitlocker > Select Manage BitLockerģ. BitLocker setup and storing the keys in Azure ADġ. This quick guide already assumes the computer is already joined to Azure Active Directory. At the time of this post, there seems to be no way to automate this process at this time but who knows what the future holds. This article contains information that shows you how to fix Bitlocker Recovery Key both (manually) and (automatically), In. One of the great benefits for Azure Active Directory is the ability to store BitLocker encryption keys online.
With Windows 10, Microsoft fully supports Azure AD (Active Directory) Join out of the box. This is great for small and medium sized companies who don’t have any on-premises infrastructure and heavily leverages the cloud. Upload the BitLocker Recovery key to Azure AD Trigger the Azure Automation Runbook Make the Computer-User association Assign users the needed EMS license User can browse the to recover BitLocker keys Let’s dig into more details of each of the steps outlined.