BitLocker

The BitLocker Repair Tool (Repair-bde) is a command-line tool included with Windows7 and Windows Server 2008 R2. This tool can be used to access encrypted data on a severely damaged hard disk if the drive was encrypted by using BitLocker Drive Encryption.Repair-bde can reconstruct critical parts of the drive and salvage recoverable data as long as a valid recovery password or recovery key is used to decrypt the data.
The Repair-bde command-line tool is intended for use when the operating system does not start, or when you cannot start the BitLocker Recovery Console. If a drive has been physically damaged, it may not be recoverable.
 

The procedure and preparation:

 

  1. Computer must have a BitLocker-protected drive.
  2. Administrative Rights and credentials

One of following required

  • Recovery password
  • Recovery key file location
  • Recovery package file location and the corresponding recovery password
  • Recovery package file location and the corresponding recovery key file location

 

An empty output volume of equal or larger size than the BitLocker-protected drive (whose contents will be completely overwritten after the repair operation).

 

The following procedure provides the command-line syntax for using each type of recovery information with the Repair-bde tool.
As Example recover access to the data stored on drive C: and write the recovered data to an output volume on Z: by using the parameters in the following

 

Recovery information              Value 

 

Recovery password                  062612-026103-175593-225830-027357-086526-  362263-513414

 

Recovery key file location        F:\RecoveryKey.bek

 

Recovery package file location        F:\ExportedKeyPackage

 

To repair a BitLocker-protected drive by using Repair-bde

 

  1. Open a Command Prompt window as an administrator.

 

  • To do this, click Start, type cmd in the Search programs and files box, right-click cmd.exe, and then click Run as administrator.

 

  • If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Yes.

 

2.     At the command prompt, type one of the following commands, depending on which recovery information you want to use:

  • To repair using a recovery password:

 

repair-bde C: Z: -rp 062612-026103-175593-225830-027357-086526-362263-513414

 

  • To repair using a recovery key:

 

repair-bde C: Z: -rk F:\RecoveryKey.bek

 

  • To repair using a recovery package and the corresponding recovery password:

 

repair-bde C: Z: -kp F:\ExportedKeyPackage -rp 062612-026103-175593-225830-027357-086526-362263-513414

 

  • To repair using a recovery package and the corresponding recovery key:

 

repair-bde C: Z: -kp F:\ExportedKeyPackage -rk F:\RecoveryKey.bek

 

Hacking

Infosec