How to check the Bitlocker encryption status and get the recovery password on the console and on the Device end

Contents

BitLocker Drive Encryption, or BitLocker, is a Microsoft Windows security and encryption feature that is included with certain newer versions of Windows. BitLocker enables users to encrypt everything on the drive Windows is installed on, protecting that data from theft or unauthorized access.

Purpose

The purpose of this knowledge base article is to provide a guide on how to check the Bitlocker encryption status and get the recovery password on the console and on the console.

Prerequisites

Encryption Status is supported only from SureMDM Agent version > 4.67.
TPM version 1.2 or higher.

Steps

Step 1: To verify the encryption status on the device end

Users or IT admins can now run a command on their machines to track the progress of encryption. For the same, follow these steps:

Launch the command prompt as Administrator.
Execute the below command on the target machine.

manage-bde -status C:

Step 2: To verify the recovery ID and password on the device end

IT admins can verify the Bitlocker recovery ID and password for Windows machines using the below command. For the same, follow these steps:

Launch the command prompt as Administrator.
Execute the below command on the target machine:

manage-bde -protectors C: -get

NOTE:

For the above commands to work, the command prompt should be run as an administrator on the device.
‘C’ refers to the primary hard drive, which is being encrypted with Bitlocker.