CmdID / PowerShell / Cmdlets / Unprotect
Unprotect-ShieldedVMRecoveryKey
Decrypts an encrypted recovery key for a Windows shielded VM obtained from the Save-ShieldedVMRecoveryKey cmdlet. Windows Server PowerShell reference
From the Windows Server PowerShell reference 7 parameters Its page in the reference
Parameters
-DecryptedBitLockerKeyPathLocation to save the decrypted BitLocker encryption key (.bek)-EncryptedBitLockerKeyPathLocation of the encrypted BitLocker encryption key-RecurseSpecifies the cmdlet should search subdirectories of the shielding data file search path for compatible PDK files.-ShieldingDataFilePathLocation of the shielding data file (.pdk) used to deploy the shielded VM.-ShieldingDataFileSearchPathLocation of one or more directories to search for a shielding data file that can be used to decrypt the provided encrypted BitLocker encryption key.-Confirm, -cfPrompts you for confirmation before running the cmdlet.-WhatIf, -wiShows what would happen if the cmdlet runs.