I assume here that you have stored all BitLocker recovery keys either in Active Directory or at another safe place. Once you have booted up Windows PE, you can unlock the BitLocker encrypted system drive with this command: manage-bde -unlock c: -recoverypassword I have already explained in detail how to create a bootable Windows PE USB stick before, so I won't repeat this procedure here.
Under Windows 7, you can create the bootable Windows PE DVD through the context menu of the ISO file. If you prefer to boot Windows PE from a DVD or CD, you can create a bootable ISO file with this command: oscdimg -n -bc:\winpe_x86\ c:\winpe_x86\ISO c:\winpe_x86\winpe_x86.iso
To create a Windows PE installation that you can use to unlock BitLocker encrypted drives, you have to download the Windows AIK (WAIK) for Windows 7, install the WAIK, launch the Deployment Tools Command Prompt with admin privileges, and then follow this procedure: Create a Windows PE WIM image to unlock BitLocker copype.cmd x86 c:\winpe_x86ĭism /mount-wim /wimfile:c:\winpe_x86\winpe.wim /index:1 /mountdir:c:\winpe_x86\mountĭism /image:c:\winpe_x86\mount /add-package /packagepath:"c:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\WinPE-WMI.cab"ĭism /unmount-Wim /mountdir:c:\winpe_x86\mount /commitĬopy c:\winpe_x86\winpe.wim c:\winpe_x86\ISO\sources\boot.wim To avoid this embarrassing situation, you'd better have a Windows PE rescue stick at hand where all Windows PE WMI classes have been installed. Not nice if your impatient manager is looking over your shoulder, claiming that she has booked a business class flight that will not wait for her. However, if you only have a common bootable Windows PE USB stick, your heroic deed will miserably fail with this error message:ĮRROR: An error occurred (code 0x80040154): To unlock a BitLocker encrypted drive from the command prompt, you need the Windows command manage-bde. Another option would be to look for another job, but we won't pursue this problem solution here. One option is to boot up from your Windows PE rescue USB stick, unlock the BitLocker encrypted drive, retrieve the important data, and be a hero. Ah, and by the way, her flight leaves in an hour. Imagine a high-ranking manager coming to your office one morning, telling you that her laptop doesn't boot up and that she has important data on the encrypted system disk that she desperately needs later today. A disadvantage of hard drive encryption is that you can't easily access the system drive for troubleshooting if Windows is unable to boot up properly.
0 kommentar(er)
