Written by
Wilsey YoungSummary: This article offers a tutorial on downloading BitLocker Data Recovery Agent to unlock the BitLocker encrypted drive. iBoysoft Data Recovery for Windows is recommended for restoring lost data from the BitLocker encrypted drive.
BitLocker data recovery agents are individuals whose public key infrastructure (PKI) certificates have been used to create a BitLocker key protector, so those individuals can use their credentials to unlock BitLocker-protected drives. BitLocker Data recovery agents can be used to recover BitLocker-protected operating system drives, fixed data drives, and removable data drives.
However, when using BitLocker data recovery agents to recover operating system drives, the operating system drive must be mounted on another computer as a data drive for the BitLocker data recovery agent to be able to unlock the drive. BitLocker Data recovery agents are added to the drive when it is encrypted and can be updated after encryption occurs.
You can click the buttons below to share this post!
When do we use BitLocker Data Recovery Agent?
In Windows 7, we introduced the feature of BitLocker Data Recovery Agent which can be used to unlock fixed data drives and removable data drives.
Generally, when we encrypt the USB flash Drive or fixed data drive, we give a password to unlock the drive. By using a file-based certificate we get an additional protector for the drive and we can use it to unlock the drive.
How to install the file-based certificate on the computer?
In order to use a Group Policy to apply the certificate to all machines in the OU, you need to install the file-based certificate on the computer.
- Press the Windows+R keys to open the Run dialog box.
- Type certmgr.msc in the box and hit the enter key to open Certificate Manager on the client's computer.
- Expand Personal and click Certificates. Right-click on Certificates to select All Tasks and then select Request New certificate.
- Under the Certificate Templates, select the BitLocker Data Recovery Agent certificate template. If you do not have the BitLocker Data Recovery Agent template, copy the Key Recovery Agent template and then add BitLocker Drive Encryption and BitLocker Drive Recovery Agent from the application policies.
- Install the certificate on the computer.
- Export the Certificate.
- Save the certificate to a location on your computer.
Now you can use a Group Policy to apply the certificate to all machines in the OU:
- Open the Group Policy Management Console and add the BitLocker Data Recovery Agent.
- Expand Computer Configuration > Windows Settings > Security Settings > Public Key Policies > BitLocker Drive Encryption.
- Right-click on BitLocker Drive Encryption and then click Add BitLocker Data Recovery Agent.
- After adding the BitLocker Data Recovery Agent, go to the Windows 7 client machine.
- After Adding the certificate, run gpupdate /force on the client machine.
How to lock and unlock the BitLocker encrypted drive?
On the Windows 7 client machine, you can open an elevated command prompt and use the following commands.
To get the protectors, run:
manage-bde -protectors -get <drive letter>:
To lock BitLocker encrypted drive, run:
manage-bde -lock <drive letter>:
To unlock BitLocker encrypted drive, run:
manage-bde -unlock <drive letter>: -cert -ct <Certificate Thumbprint>
How to recover lost data from a BitLocker encrypted drive?
iBoysoft Data Recovery for Windows is a professional data recovery tool that can help you recover lost data from a BitLocker encrypted drive on the premise that you have the original password or BitLocker recovery key.
- Download, install, and launch iBoysoft Data Recovery for Windows on your computer. Select the “BitLocker Data Recovery” Module.
- Choose the BitLocker encrypted drive from which you want to recover lost data and click “Next” to continue.
- Enter the BitLocker recovery key or password.
- Scan the lost files from the BitLocker encrypted drive.
- After your files are found, please tick them and click "Recover" to save.
You can share this wonderful data recovery tool with your friends on social media!