ITS

Information Technology Services
Information Technology Services

Backing Up Your BitLocker Recovery Key to AD

If your computer was encrypted with BitLocker prior to joining ITServices' Active Directory (AD) domain, then your recovery key has not been backed up on our servers. Please follow the instructions below to store a copy of your recovery key on AD.

**Please Note**

ITServices does not recommend that you rely on the AD copy of your key as a primary backup. We recommend that you print a copy and keep it in a secure location. To verify/retrieve the copy that is stored in AD you must contact the IT Support Center at 613-533-6666


  1. Open the Windows Command Prompt as an administrator
    • In Windows 8.1, go to the Start screen and type cmd. Right-click on Command Prompt when it appears in the list and choose "Run as administrator"
    • In Windows 7, click the Start menu and type cmd into the search box. Right-click on Command Prompt when it appears in the list and choose "Run as administrator"
      screenshot for step 1
  2. Enter the following command:

    manage-bde -protectors -get c:
    • This will show the current recovery key being used for your system drive as well as the ID for that key which is needed in the next step.
      **Note**- The example uses c: as your system drive letter. If your system drive is a different letter make the appropriate changes to the command.
    • If you are using a TPM you will see two IDs listed. The one you need to take note of is the ID directly under "Numerical Password".


      screenshot for step 2
  3. Once you have written down or copied the ID from above, use it while entering the following command:
    manage-bde -protectors -adbackup c: -id {ID FROM STEP 2}

    screenshot for step 3

    • **Note**- The example uses c: as your system drive letter. If your system drive is a different letter make the appropriate changes to the command.
  4. As long as you typed everything correctly, you should now get a successful message. If you do not get a successful message or have any other questions please contact the IT Support Center at 613-533-6666.
    screenshot for step 4