Cmdlets

Choose a cmdlet from the list on the left or search for a specific cmdlet. Choose a cmdlet from the list or search for a specific cmdlet.
About Help  Providers
 

Unlock-BitLocker

Unlock-BitLocker

bitlocker.psm1

Synopsis

Restores access to data on a BitLocker volume.

Syntax

Unlock-BitLocker [-MountPoint] [-AdAccountOrGroup] [-Confirm] [-WhatIf] [<CommonParameters>]

Unlock-BitLocker [-MountPoint] [-Password] [-Confirm] [-WhatIf] [<CommonParameters>]

Unlock-BitLocker [-MountPoint] [-RecoveryKeyPath] [-Confirm] [-WhatIf] [<CommonParameters>]

Unlock-BitLocker [-MountPoint] [-RecoveryPassword] [-Confirm] [-WhatIf] [<CommonParameters>]

Detailed Description

The Unlock-BitLocker cmdlet restores access to encrypted data on a volume that uses BitLocker Drive Encryption. You can use the Lock-BitLocker cmdlet to prevent access.

In order to restore access, provide one of the following key protectors for the volume: -- Active Directory Domain Services (AD DS) account -- Password -- Recovery key -- Recovery password

For an overview of BitLocker, see BitLocker Drive Encryption Overview (http://technet.microsoft.com/en-us/library/cc732774.aspx) on TechNet.

Parameters

-AdAccountOrGroup <SwitchParameter>

Indicates that BitLocker requires account credentials to unlock the volume. In order to use this parameter, the account for the current user must be a key protector for the volume.

Aliases

None

Required?

true

Position

named

Default value

None

Accept pipeline input?

false

Accept wildcard characters?

false

-MountPoint <String[]>

Specifies an array of drive letters or BitLocker volume objects. The cmdlet unlocks the volumes specified. To obtain a BitLocker volume object, use the Get-BitLockerVolume cmdlet.

Aliases

None

Required?

true

Position

1

Default value

None

Accept pipeline input?

True (ByValue, ByPropertyName)

Accept wildcard characters?

false

-Password <SecureString>

Specifes a secure string that contains a password. The password specified acts as a protector for the volume encryption key.

Aliases

pw

Required?

true

Position

named

Default value

None

Accept pipeline input?

false

Accept wildcard characters?

false

-RecoveryKeyPath <String>

Specifies the path to a recovery key. The key stored in the specified path acts as a protector for the volume encryption.

Aliases

rk

Required?

true

Position

named

Default value

None

Accept pipeline input?

false

Accept wildcard characters?

false

-RecoveryPassword <String>

Specifies a recovery password. The password specified acts as a protector for the volume encryption key.

Aliases

rp

Required?

true

Position

named

Default value

None

Accept pipeline input?

false

Accept wildcard characters?

false

-Confirm <SwitchParameter>

Prompts you for confirmation before running the cmdlet.

Aliases

None

Required?

false

Position

named

Default value

false

Accept pipeline input?

false

Accept wildcard characters?

false

-WhatIf <SwitchParameter>

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Aliases

None

Required?

false

Position

named

Default value

false

Accept pipeline input?

false

Accept wildcard characters?

false

Input Type

BitLockerVolume[], String[]

Return Type

BitLockerVolume[]

Notes

None

Examples

Example 1: Unlock a volume

This example unlocks a specified BitLocker volume by using a password.

The first command uses the ConvertTo-SecureString cmdlet to create a secure string that contains a password and saves it in the $SecureString variable. For more information about the ConvertTo-SecureString cmdlet, type Get-Help ConvertTo-SecureString.

The second command unlocks the specified BitLocker volume by using the password saved in the $SecureString variable.

PS C:\> $SecureString = ConvertTo-SecureString "fjuksAS1337" -AsPlainText -Force
PS C:\> Unlock-BitLocker -MountPoint "E:" -Password $SecureString

Online Version
Disable-BitLocker
Enable-BitLocker
Lock-BitLocker
Resume-BitLocker
Suspend-BitLocker
Get-BitLockerVolume