< Back
Backup-BitLockerKeyProtector
Post
NAME Backup-BitLockerKeyProtector
SYNOPSIS
Saves a key protector for a BitLocker volume in AD?? DS.
SYNTAX
Backup-BitLockerKeyProtector [-MountPoint] <String[]> [-KeyProtectorId] <String> [-Confirm] [-WhatIf] [<CommonParameters>]
DESCRIPTION
The Backup-BitLockerKeyProtector cmdlet saves a recovery password key protector for a volume protected by BitLocker Drive Encryption to Active
Directory Domain Services (ADDS). Specify a key to be saved by ID.
For an overview of BitLocker, see BitLocker Drive Encryption Overview (http://technet.microsoft.com/en-us/libr ... 32774.aspx) on TechNet.
PARAMETERS
-KeyProtectorId <String>
Specifies the ID for a key protector or a KeyProtector object. A BitLocker volume object includes a KeyProtector object. You can specify the
key protector object itself, or you can specify the ID. See the Examples section. To obtain a BitLocker volume object, use the
Get-BitLockerVolume cmdlet.
Required? true
Position? 2
Default value
Accept pipeline input? True (ByValue, ByPropertyName)
Accept wildcard characters? false
-MountPoint <String[]>
Specifies an array of drive letters or BitLocker volume objects. The cmdlet saves key protectors for the volumes specified. To obtain a
BitLocker volume object, use the Get-BitLockerVolume cmdlet.
Required? true
Position? 1
Default value
Accept pipeline input? True (ByValue, ByPropertyName)
Accept wildcard characters? false
-Confirm [<SwitchParameter>]
Prompts you for confirmation before running the cmdlet.
Required? false
Position? named
Default value false
Accept pipeline input? false
Accept wildcard characters? false
-WhatIf [<SwitchParameter>]
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Required? false
Position? named
Default value false
Accept pipeline input? false
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (http://go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
BitLockerVolume, String
OUTPUTS
BitLockerVolume
Example 1: Save a key protector for a volume
PS C:\\> $BLV = Get-BitLockerVolume -MountPoint "C:"
PS C:\\>Backup-BitLockerKeyProtector -MountPoint "C:" -KeyProtectorId $BLV.KeyProtector[1]
This example saves a key protector for a specified BitLocker volume.
The first command uses Get-BitLockerVolume to obtain a BitLocker volume and store it in the $BLV variable.
The second command backs up the key protector for the BitLocker volume specified by the MountPoint parameter. The command specifies the key
protector by using its ID, contained in the BitLocker object stored in $BLV. The KeyProtector attribute contains an array of key protectors
associated to the volume. This command uses standard array syntax to index the KeyProtector object. The key protector that corresponds to the
recovery password key protector can be identified by using the KeyProtectorType attribute in the KeyProtector object.
Example 2: Save a key protector using an ID
PS C:\\> Backup-BitLockerKeyProtector -MountPoint "C:" -KeyProtectorId "{E2611001E-6AD0-4A08-BAAA-C9c031DB2AA6}"
This command saves a key protector for a specified BitLocker volume to AD?? DS. The command specifies the key protector by using its ID.
RELATED LINKS
Online Version: http://go.microsoft.com/fwlink/?linkid=287648
Add-BitLockerKeyProtector
Remove-BitLockerKeyProtector
Get-BitLockerVolume
SYNOPSIS
Saves a key protector for a BitLocker volume in AD?? DS.
SYNTAX
Backup-BitLockerKeyProtector [-MountPoint] <String[]> [-KeyProtectorId] <String> [-Confirm] [-WhatIf] [<CommonParameters>]
DESCRIPTION
The Backup-BitLockerKeyProtector cmdlet saves a recovery password key protector for a volume protected by BitLocker Drive Encryption to Active
Directory Domain Services (ADDS). Specify a key to be saved by ID.
For an overview of BitLocker, see BitLocker Drive Encryption Overview (http://technet.microsoft.com/en-us/libr ... 32774.aspx) on TechNet.
PARAMETERS
-KeyProtectorId <String>
Specifies the ID for a key protector or a KeyProtector object. A BitLocker volume object includes a KeyProtector object. You can specify the
key protector object itself, or you can specify the ID. See the Examples section. To obtain a BitLocker volume object, use the
Get-BitLockerVolume cmdlet.
Required? true
Position? 2
Default value
Accept pipeline input? True (ByValue, ByPropertyName)
Accept wildcard characters? false
-MountPoint <String[]>
Specifies an array of drive letters or BitLocker volume objects. The cmdlet saves key protectors for the volumes specified. To obtain a
BitLocker volume object, use the Get-BitLockerVolume cmdlet.
Required? true
Position? 1
Default value
Accept pipeline input? True (ByValue, ByPropertyName)
Accept wildcard characters? false
-Confirm [<SwitchParameter>]
Prompts you for confirmation before running the cmdlet.
Required? false
Position? named
Default value false
Accept pipeline input? false
Accept wildcard characters? false
-WhatIf [<SwitchParameter>]
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Required? false
Position? named
Default value false
Accept pipeline input? false
Accept wildcard characters? false
<CommonParameters>
This cmdlet supports the common parameters: Verbose, Debug,
ErrorAction, ErrorVariable, WarningAction, WarningVariable,
OutBuffer, PipelineVariable, and OutVariable. For more information, see
about_CommonParameters (http://go.microsoft.com/fwlink/?LinkID=113216).
INPUTS
BitLockerVolume, String
OUTPUTS
BitLockerVolume
Example 1: Save a key protector for a volume
PS C:\\> $BLV = Get-BitLockerVolume -MountPoint "C:"
PS C:\\>Backup-BitLockerKeyProtector -MountPoint "C:" -KeyProtectorId $BLV.KeyProtector[1]
This example saves a key protector for a specified BitLocker volume.
The first command uses Get-BitLockerVolume to obtain a BitLocker volume and store it in the $BLV variable.
The second command backs up the key protector for the BitLocker volume specified by the MountPoint parameter. The command specifies the key
protector by using its ID, contained in the BitLocker object stored in $BLV. The KeyProtector attribute contains an array of key protectors
associated to the volume. This command uses standard array syntax to index the KeyProtector object. The key protector that corresponds to the
recovery password key protector can be identified by using the KeyProtectorType attribute in the KeyProtector object.
Example 2: Save a key protector using an ID
PS C:\\> Backup-BitLockerKeyProtector -MountPoint "C:" -KeyProtectorId "{E2611001E-6AD0-4A08-BAAA-C9c031DB2AA6}"
This command saves a key protector for a specified BitLocker volume to AD?? DS. The command specifies the key protector by using its ID.
RELATED LINKS
Online Version: http://go.microsoft.com/fwlink/?linkid=287648
Add-BitLockerKeyProtector
Remove-BitLockerKeyProtector
Get-BitLockerVolume