BitLocker recovery keys

eAuditor cloud enables secure storage and retrieval of BitLocker recovery keys for partitions encrypted at the operating system level.

A recovery key may be required when BitLocker requires additional verification, for example after changes to hardware configuration or device security settings.

How the recovery key is generated

When encryption is initiated from eAuditor cloud:

1. The console saves the recovery key in encrypted form in the database.

2. eAgent receives the encryption task together with the recovery key and the parameters specified in the configuration.

3. BitLocker encrypts the partition on the computer.

eAgent does not verify the recovery key that was previously saved locally in Windows.

If the disk was encrypted with BitLocker before you started working with eAuditor cloud, the recovery key will not appear automatically in the console. For the system to create and save a new key, first decrypt the partition from eAuditor cloud, and then start encryption again.

Retrieving the recovery key

1

Go to IT Management > Encryption.

2

Find the computer and partition for which you want to retrieve the key.

3

Click the Encryption key.

4

Confirm administrator authorization.

5

Click Reveal, to display the recovery key and copy it.

Displaying the recovery key after administrator authorization.

Recovery keys can be copied individually for a selected partition or in bulk for multiple devices.

Secure use of the key

Treat the recovery key as access data for the encrypted disk.

• Share it only with authorized persons.

• Do not send the key in an unencrypted email message or messenger.

• After using the key, verify why the device required access recovery.

FAQ

Can I retrieve the key for a disk that was encrypted before eAuditor cloud was deployed?

No. The system saves the recovery key only during encryption initiated from eAuditor cloud.

Is the recovery key stored in plain text in the console?

No. The key is saved in encrypted form and can be revealed after administrator authorization.

Can I retrieve keys for multiple devices?

The system allows multiple keys to be displayed simultaneously, but copying is only possible individually.