Bitlocker

Summary

The Recovery Key is stored in Azure AD when joining a device to Azure AD and by activating Bitlocker. To find the recovery key, the details are available for registered devices in the Azure AD Management Portal.

Problem

There are two different use cases where either an end-user or a system administrator needs to find the Bitlocker recovery key. In addition, Microsoft has multiple user interfaces, and administrative URL’s to navigate in order to find the recovery key. While it is helpful to be able to find the recovery key through different interfaces, this confuses the user and complicates training or documentation. This article documents how to find the Bitlocker Recovery Key and the various options.

Option 1, Using the Azure Management Portal

1. Open the Azure AD resource object in the Management Portal
   https://manage.windowsazure.com
2. Go to the All Users object and search for the account associated to the device.
3. Click the user object name to view the profile properties
4. Go to the Devices object under the Manage heading.
5. Select the appropriate listed device.
6. If the device is registered with Bitlocker encryption, then the Bitlocker Key ID and Recovery Key will be visible.
7. Click the Copy to Clipboard button and paste the data to view the entire string.