I have installed Hyper-V server on my new machine and then I added the Bitlocker function and initialized TPM. Now, I am trying to enable Bitlocker on the HDD.

I need:

  • encryption key saved on TPM
  • recovery key saved on USB flash
    • key will be printed and put into safe
    • the flash will then be formatted
  • encryption algorithm AES256-XTS

I tried to use the following command:

Enable-BitLocker -MountPoint "C:" -EncryptionMethod XtsAes256 -RecoveryKeyProtector -RecoveryKeyPath "D:"

(I used this documentation)

The problem is that the file created on flash is not readable, therefore I can't print it.

What am I doing wrong?

  • 1
    What version of Hyper-V Server? – Davidw Dec 25 '17 at 19:51
  • 1
    Is it in a domain? Why not just let it backup to AD. – Zoredache Dec 25 '17 at 20:25
  • The recovery key saved to USB is not intended to be printed. It's intended to remain on digital media to be plugged into the computer if it is necessary to use the key. – Michael Hampton Dec 26 '17 at 5:03
  • @Davidw - It's Hyper-V server 2016 – Vilican Dec 26 '17 at 12:08
  • @Zoredache - No, it isn't. – Vilican Dec 26 '17 at 12:09

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.