README.md

SecretManagement.BitLocker

This PowerShell module is a Microsoft.PowerShell.SecretManagement extension for BitLocker recovery keys available in the PowerShell Gallery.

Tip

Read the related blog post at https://blog.graa.dev/Vault-LAPS

📄 Prerequisites

PowerShell version

Note

This module should support both Windows PowerShell version 5.1 and PowerShell 7, but testing has been done on PowerShell 7.5.1

Microsoft.PowerShell.SecretManagement

Make sure that the requisite Microsoft.PowerShell.SecretManagement module is installed.

Install-Module -Name Microsoft.PowerShell.SecretManagement

📦 Installation

Install the BitLocker extension that is published to the PowerShell Gallery:

Install-Module -Name SecretManagement.BitLocker -AllowClobber

🔧 Usage

Register vault

Important

At present secrets are only pulled from the current computer's domain

$vaultName = 'BitLocker'
$module = 'SecretManagement.BitLocker'

Register-SecretVault -Name $vaultName -Module $module

Optionally set this vault as the default one.

Set-SecretVaultDefault -Name 'BitLocker'

Authenticating

Authentication is done using the logged-in user's credentials.

Retrieve secret info

Retrieve information about every secret:

Get-SecretInfo -Vault 'BitLocker'

Filter by computer name:

Get-SecretInfo -Vault 'BitLocker' -Name 'computer'

Retrieve secret

Retrieve a secret by specifying the secret name:

Get-Secret -Vault 'BitLocker' -Name 'computer'

🙌 Contributing

Any contributions are welcome and appreciated!

Please do so by forking the project and opening a pull request!

✨ Credits

Note

This module is not supported by Microsoft in any way.