Invoke-Command -ComputerName "PC-WS001" -ScriptBlock (Get-BitLockerVolume -MountPoint "C:").KeyProtector Just the 48-digit number. No extra text. Need more details (like the Key ID)? Invoke-Command -ComputerName "PC-WS001" -ScriptBlock Where-Object $_.KeyProtectorType -eq 'RecoveryPassword' Method 2: Get Keys for ALL Drives (System + Data) Some machines encrypt secondary drives (D:, E:). Use this to pull everything at once:
# Install RSAT (if not already) Add-WindowsCapability -Name "Rsat.BitLocker.Recovery.Tools~~~~0.0.1.0" -Online Get-BitLockerRecoveryInfo -ComputerName "PC-WS001" | Select-Object RecoveryPassword powershell get bitlocker recovery key remote computer
Add | Export-Csv -Path "C:\Reports\BitLockerKeys.csv" -NoTypeInformation to save to a secure file. Method 3: Batch Mode – Get Keys from Multiple Computers Let’s say you have a text file with 20 computer names. Loop through them: Loop through them: This works even if the
This works even if the PC is dead or offline. Use this method when possible. Don't wait for a boot-loop emergency to figure this out. Test Method 1 on a lab machine today. Better yet, script Method 3 into a weekly audit report so you always know where your recovery keys are. powershell get bitlocker recovery key remote computer