manage-bde

Turns on or turns off BitLocker, specifies unlock mechanisms, updates recovery methods, and unlocks BitLocker-protected data drives. NOTE: This command-line tool can be used in place of the BitLocker Drive Encryption Control Panel item.

manage-bde [-status] [-on] [-off] [-pause] [-resume] [-lock] [-unlock] [-autounlock] [-protectors] [-tpm]

[-setidentifier] [-forcerecovery] [-changepassword] [-changepin] [-changekey] [-keypackage] [-upgrade] [-wipefreespace] [{-?|/?}] [{-help|-h}]

Show 20 options

manage-bde statusProvides information about all drives on the computer, whether or not they are BitLocker-protected.

manage-bde onEncrypts the drive and turns on BitLocker.

manage-bde offDecrypts the drive and turns off BitLocker. All key protectors are removed when decryption is complete.

manage-bde pausePauses encryption or decryption.

manage-bde resumeResumes encryption or decryption.

manage-bde lockPrevents access to BitLocker-protected data.

manage-bde unlockAllows access to BitLocker-protected data with a recovery password or a recovery key.

manage-bde autounlockManages automatic unlocking of data drives.

manage-bde protectorsManages protection methods for the encryption key.

manage-bde tpmConfigures the computer's Trusted Platform Module (TPM). This command isn't supported on computers running Windows 8 or win8_server_2. To manage the TPM on these computers, use either the TPM Management MMC snap-in or the TPM Management cmdlets for Windows PowerShell.

manage-bde setidentifierSets the drive identifier field on the drive to the value specified in the Provide the unique identifiers for your organization Group Policy setting.

manage-bde ForceRecoveryForces a BitLocker-protected drive into recovery mode on restart. This command deletes all TPM-related key protectors from the drive. When the computer restarts, only a recovery password or recovery key can be used to unlock the drive.

manage-bde changepasswordModifies the password for a data drive.

manage-bde changepinModifies the PIN for an operating system drive.

manage-bde changekeyModifies the startup key for an operating system drive.

manage-bde KeyPackageGenerates a key package for a drive.

manage-bde upgradeUpgrades the BitLocker version.

manage-bde WipeFreeSpaceWipes the free space on a drive.

-? or /?Displays brief Help at the command prompt.

-help or -hDisplays complete Help at the command prompt.