Invoke-Command -ComputerName "PC-WS001" -ScriptBlock (Get-BitLockerVolume -MountPoint "C:").KeyProtector Just the 48-digit number. No extra text. Need more details (like the Key ID)? Invoke-Command -ComputerName "PC-WS001" -ScriptBlock Where-Object $_.KeyProtectorType -eq 'RecoveryPassword' Method 2: Get Keys for ALL Drives (System + Data) Some machines encrypt secondary drives (D:, E:). Use this to pull everything at once:
This works even if the PC is dead or offline. Use this method when possible. Don't wait for a boot-loop emergency to figure this out. Test Method 1 on a lab machine today. Better yet, script Method 3 into a weekly audit report so you always know where your recovery keys are. powershell get bitlocker recovery key remote computer
else [PSCustomObject]@Computer=$pc; RecoveryKey=$null; Status="Offline" powershell get bitlocker recovery key remote computer