The above list of steps (which I have found on this forum some time ago) could at best be called a workaround, not a normal method of operation. (I don't know if Microsoft publishes/documents the correct way to un-bitlocker a disk)īut anything to make the above insane list of steps shorter and somehow manageable would be a real help.ĭata-at-rest encryption is the norm rather than exception these days. It doesn't have to be a File Level Restore, if that is too difficult to build. What is needed, is an easier way to recover files. This requires quite a lot of skill and permissions, and can only be assigned to a senior engineer. unmount temporary disk and delete (prone to human error) mount temp vdisk within the guest OS and copy files over shut down vm and copy vdisk over to another vm (prone to human error) add a small virtual disk to the system, initialise it in the guest os, format log on with local admin account and take ownership of needed files in guest filesystem Instant vm recovery with network disconnected On the client computer, type the Recovery Key.That's possible since the invention of instant VM recovery about 10 years ago We call it 'universal restore'.Ĭurrently it takes us 45 - 60 mins to restore a single file from a bitlockered VM In the BitLocker Management Recovery window, click Get Recovery Key. To learn how to use the Microsoft recovery tools to decrypt the disk, see the Microsoft BitLocker Recovery Guide. In Select File name and location, browse to a location. If the disk sectors containing the encrypted keys are damaged or unreadable, you can export to external media a BitLocker Key Package to use for recovery. To search for the Recovery Key ID, type the Common Name of the computer, or browse for it The BitLocker Management Advanced Recovery window opens. Optional: If you don't have the Recovery Key ID for the client, you can search for it. The Recovery Key ID is a string of numbers and letters that looks like this:Īfter you type a few characters, the Recovery Key ID fills automatically. Start typing the Recovery Key ID of the client. The BitLocker Management Recovery window opens Open SmartEndpoint and go to Menu > Tools > BitLocker Management Recovery. To get the Recovery Key for a client computer: Only share it using trusted and confirmed channels. Important - Treat the Recovery Key like a password. With the Recovery Key, the user can unlock encrypted drives and perform recoveries. In SmartEndpoint you can use the Recovery Key ID for a computer to find the Recovery Key for an encrypted client computer. BitLocker recovery is the process by which you can restore access to a BitLocker-protected drive in the event that you cannot unlock the drive normally.

Bitlocker file recovery software