Use case: Use this procedure when a user’s device prompts for a BitLocker recovery key, for example after hardware changes or a TPM reset, to locate the corresponding recovery password in Active Directory.
To locate a BitLocker recovery password in Active Directory, follow these steps:
- Select Active Directory
- Right-click the domain (or an OU to limit the search scope).
- Select “Find BitLocker key”.
- This is a shortcut that inserts the search phrase
BitLocker=. - You can also type
bl=to trigger the BitLocker search.
- This is a shortcut that inserts the search phrase
- Start typing the recovery password ID to locate the BitLocker recovery password.
- Typically only a few characters are needed.
- Double-click the BitLocker recovery password.
- This opens the associated computer object with the recovery password entry in focus.
(If your BitLocker keys are stored in Entra ID, follow this guide.)
ID:KB_106_HowToLocateBitlockerRecoveryPassword
