Export (0) Print
Expand All

Backup-BitLockerKeyProtector

Windows Server 2012 R2 and Windows 8.1

Updated: March 3, 2014

Applies To: Windows 8.1, Windows PowerShell 4.0, Windows Server 2012 R2

Backup-BitLockerKeyProtector

Saves a key protector for a BitLocker volume in AD DS.

Syntax

Parameter Set: Default
Backup-BitLockerKeyProtector [-MountPoint] <String[]> [-KeyProtectorId] <String> [-Confirm] [-WhatIf] [ <CommonParameters>]




Detailed Description

The Backup-BitLockerKeyProtector cmdlet saves a recovery password key protector for a volume protected by BitLocker Drive Encryption to Active Directory Domain Services (AD DS). Specify a key to be saved by ID.

For an overview of BitLocker, see BitLocker Drive Encryption Overview (http://technet.microsoft.com/en-us/library/cc732774.aspx) on TechNet.

Parameters

-KeyProtectorId<String>

Specifies the ID for a key protector or a KeyProtector object. A BitLocker volume object includes a KeyProtector object. You can specify the key protector object itself, or you can specify the ID. See the Examples section. To obtain a BitLocker volume object, use the Get-BitLockerVolume cmdlet.


Aliases

none

Required?

true

Position?

2

Default Value

none

Accept Pipeline Input?

True (ByValue, ByPropertyName)

Accept Wildcard Characters?

false

-MountPoint<String[]>

Specifies an array of drive letters or BitLocker volume objects. The cmdlet saves key protectors for the volumes specified. To obtain a BitLocker volume object, use the Get-BitLockerVolume cmdlet.


Aliases

none

Required?

true

Position?

1

Default Value

none

Accept Pipeline Input?

True (ByValue, ByPropertyName)

Accept Wildcard Characters?

false

-Confirm

Prompts you for confirmation before running the cmdlet.


Required?

false

Position?

named

Default Value

false

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.


Required?

false

Position?

named

Default Value

false

Accept Pipeline Input?

false

Accept Wildcard Characters?

false

<CommonParameters>

This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see    about_CommonParameters.

Inputs

The input type is the type of the objects that you can pipe to the cmdlet.

  • BitLockerVolume, String

Outputs

The output type is the type of the objects that the cmdlet emits.

  • BitLockerVolume

Examples

Example 1: Save a key protector for a volume

This example saves a key protector for a specified BitLocker volume.

The first command uses Get-BitLockerVolume to obtain a BitLocker volume and store it in the $BLV variable.

The second command backs up the key protector for the BitLocker volume specified by the MountPoint parameter. The command specifies the key protector by using its ID, contained in the BitLocker object stored in $BLV. The KeyProtector attribute contains an array of key protectors associated to the volume. This command uses standard array syntax to index the KeyProtector object. The key protector that corresponds to the recovery password key protector can be identified by using the KeyProtectorType attribute in the KeyProtector object.


PS C:\> $BLV = Get-BitLockerVolume -MountPoint "C:"
PS C:\> Backup-BitLockerKeyProtector -MountPoint "C:" -KeyProtectorId $BLV.KeyProtector[1].KeyProtectorId

Example 2: Save a key protector using an ID

This command saves a key protector for a specified BitLocker volume to AD DS. The command specifies the key protector by using its ID.


PS C:\> Backup-BitLockerKeyProtector -MountPoint "C:" -KeyProtectorId "{E2611001E-6AD0-4A08-BAAA-C9c031DB2AA6}"

Related topics

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft