Unlock Bitlocker under WinPE
I have a situation where I want to use WinPE to access a boot volume protected with BitLocker. I used the Windows 7 WAIK to created a WinPE boot disk. When I run the 'manage-bde -unlock' command I get the error "class not registered." X:\windows\system32> manage-bde -unlock d: -recoverypassword <*RECOVERYPASSWORD*> BitLocker Drive Encryption: Configuration Tool version 6.1.7600 Copyright (C) Microsoft Corporation. All rights reserved. ERROR: An error occurred (code 0x80040154): Class not registered X:\windows\system32> I've also tried adding scripting support to use "cscript manage-bde.wsf -unlock" but I get the same error. There are enough examples on the web make me think this supposed to work. I would be grateful if anyone has any thoughts. - Travis
February 23rd, 2010 3:09pm

Hi Travis, Based on my research, I suggest you try the following steps to troubleshoot the issue. To unlock an encrypted volume, type the following command at a command prompt, and then press ENTER: cscript %systemroot%\system32\manage-bde.wsf –unlock Volume : -rk PathToExternalKeyFile: \ External Key File Name For example, if you want to unlock volume D and if you have stored the Recovery Key on the drive J, type the following command at the command prompt, and then press ENTER: cscript %systemroot%\system32\manage-bde.wsf –unlock D: -rk J:\ External Key File Name Note The external key file name is listed in the script output. If the Recovery Key is damaged or missing, you can still unlock the volume. To do this, type the following command at the command prompt: cscript %systemroot%\system32\manage-bde.wsf –unlock Volume : -rp Numeric Recovery Password Note The numeric Recovery Password is listed in the script output. For more information, please refer to the following article: BitLocker Drive Encryption Thanks, Novak
Free Windows Admin Tool Kit Click here and download it now
February 25th, 2010 1:58am

Thanks for the help but I still get the "class not registered" error message, except that it adds the following warning: "WARNING: The script manage-bde.wsf is not supported. Please use manage-bde.exe." Note, I'm using the Win 7 WAIK to create my WinPE boot disk so that probably explains why I get a warning. The Windows® Automated Installation Kit (AIK) for Windows® 7 http://go.microsoft.com/fwlink/?LinkId=136976 My goal is to be able to image a Bitlocker protected volume without booting the computer. A typical scenario would be a virus infected laptop that I want to "backup, flatten, and reload from scratch," but there are other needs as well. If the volume is Bitlocker encrypted, my only option at the moment is to pull the drive and stick it in another running computer and use the recovery password to mount the volume. That works, but it looks like the WinPE approach is supposed to also work and would simplify the process. I'm open to suggestions. Thanks.
March 2nd, 2010 2:18pm

Does WAIK's WinPE image has supported a BitLocker?
Free Windows Admin Tool Kit Click here and download it now
April 5th, 2010 3:05am

Hello, I face the same situation as Travis. My WinPE was also build from Windows 7 WAIK. I have not seen any Package to Add to support Bitlocker while building my WinPE. The executable file "manage-bde.exe" is part of my WinPE, so I guess it is supported. Stefan
April 6th, 2010 9:53am

I found in Technet that it states in small print that manage-bde is not supported in any WinPE environment. It's hard to believe they aren't supporting this, but it's true.
Free Windows Admin Tool Kit Click here and download it now
April 20th, 2010 2:23pm

I think that the "Class" in the error message may mean a WMI class. BitLocker is based on a WMI Win32_EncryptableVolume Class. http://msdn.microsoft.com/en-us/library/aa376483(VS.85).aspx You can use BitLocer in WinPE only if you install the WMI-package to your WinPE as follows, dism /image:./mount /Add-Pakage /PackagePath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-wmi.cab". I found that there is Win32_EncryptableVolume.dll in the package. good luck.
January 20th, 2011 5:59am

no replies any more?! has anyone tried this with the WMI class? does this work now?
Free Windows Admin Tool Kit Click here and download it now
November 9th, 2011 10:39am

I think that the "Class" in the error message may mean a WMI class. BitLocker is based on a WMI Win32_EncryptableVolume Class. http://msdn.microsoft.com/en-us/library/aa376483(VS.85).aspx You can use BitLocer in WinPE only if you install the WMI-package to your WinPE as follows, dism /image:./mount /Add-Pakage /PackagePath:"C:\Program Files\Windows AIK\Tools\PETools\x86\WinPE_FPs\winpe-wmi.cab". I found that there is Win32_EncryptableVolume.dll in the package. good luck. I used this suggestion and was able to support unlocking of drives from my WinPE image. It does work.
February 14th, 2012 1:11pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics