CmdID

CmdID / Commands / manage-bde

manage-bde unlock

Unlocks a BitLocker-protected drive by using a recovery password or a recovery key. Windows commands reference

On Windows

Opens CmdID with your command. It is read in your browser and sent nowhere.

Windows

from the Windows commands reference, CC BY 4.0
manage-bde -unlock {-recoverypassword -password | -recoverykey <pathtoexternalkeyfile>} <drive> [-certificate {-cf pathtocertificatefile | -ct certificatethumbprint} {-pin}] [-password] [-computername <name>] [{-?|/?}] [{-help|-h}]
manage-bde -unlock E: -password
manage-bde -unlock E: -recoverypassword xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx
manage-bde -unlock E: -recoverykey F:\Backupkeys\recoverykey.bek
-recoverypasswordSpecifies that a recovery password will be used to unlock the drive. You can also use -rp as an abbreviated version of this command. This is the recovery key that's saved to a text file and must be written exactly as shown including dashes.
-passwordRepresents the recovery password that can be used to unlock the drive that either you or your administrator has set.
-recoverykeySpecifies that an external recovery key file will be used to unlock the drive. You can also use -rk as an abbreviated version of this command. This method searches for the .bek recovery key file that is saved to a USB drive.
<pathtoexternalkeyfile>Represents the external recovery key file that can be used to unlock the drive.
<drive>Represents a drive letter followed by a colon.
-certificateThe local user certificate for a BitLocker certificate to unlock the volume is located in the local user certificate store. You can also use -cert as an abbreviated version of this command.
-cf <pathtocertificatefile>Path to the certificate file.
-ct <certificatethumbprint>Certificate thumbprint which may optionally include the PIN (-pin).
-computernameSpecifies that manage-bde.exe will be used to modify BitLocker protection on a different computer. You can also use -cn as an abbreviated version of this command.
<name>Represents the name of the computer on which to modify BitLocker protection. Accepted values include the computer's NetBIOS name and the computer's IP address.
-? or /?Displays brief Help at the command prompt.
-help or -hDisplays complete Help at the command prompt.