The BitLocker Status tool provides detailed BitLocker information associated with selected devices.
Required Permissions
| Plugin | Permissions |
|---|---|
| ActiveDirectory | GetADComputersBitLockerStatus |
| BitLocker | GetBitLockerStatus AddTPMAndSKKeyProtector DecryptVolume ResumeBitLockerVolume AddProtectorsAndEncrypt ForceBitLockerRecovery AddPassphraseKeyProtector EncryptVolume AddTPMAndPINKeyProtector BackupProtectorToAD AddTPMKeyProtector BackupProtectorToAzureAD RegenerateBitLockerRecoveryKey SetVolumeIDField AddNumericalPasswordKeyProtector SuspendBitLockerVolume GetRecoveryPasswordFromDevice |
| ConfigMgrServer | GetSystemsBitLockerEncryptionStatus |
| SystemInformation | ResetBitLockerRecoveryPassword |
To run the tool:
1. Right-click on a device or multi-select devices.
2. Select Right Click Tools > Security Tools > BitLocker Status.
The BitLocker Status window displays details about the selected devices including:
- Drive Letter
- Disk Size
- Encryption Status, Method, and Percentage
- Conversion Status
- Lock Status
- Key Protectors (TPM, PIN, StartupKey, Passphrase, Numerical Password)
NOTE: Details are shown for all connected drives on a selected device.
Actionable Results
Additional Right Click Tools actions can be run from the BitLocker Status window by right-clicking on devices.
BitLocker-specific actions include:
- Suspend or resume BitLocker
- Fully or partially decrypt or encrypt a volume
- Add or back up key protectors
