Summary
This article provides instruction on how to access BitLocker recovery keys for USNH-managed Windows computers from the Microsoft Entra admin center. There are three methods of locating BitLocker recovery keys:
How-To
Task: To access BitLocker recovery keys using the BitLocker key ID
Instructions
Step 1 - Navigate to https://entra.microsoft.com/#home and login with your admin credentials. Example: adm_jbd1121@usnh.edu
Step 2 - Activate your Cloud Device Administrator role.
Step 3 - Select Devices, then BitLocker keys from the navigation menu on the left-hand side of the screen.
Step 4 - Enter the 32-digit key ID in the provided field and click Show Recovery Key.
Outcome
You have successfully retrieved the BitLocker key for the device.
Back to top
How-To
Task: To access BitLocker recovery keys using the device ID
Instructions
Step 1 - Navigate to https://entra.microsoft.com/#home and login with your admin credentials. Example: adm_jbd1121@usnh.edu
Step 2 - Activate your Cloud Device Administrator role.
Step 3 - Select Devices, then All devices from the navigation menu on the left-hand side of the screen.
Step 4 - Enter the device ID in the provided field, and select the device.
Step 5 - Select BitLocker keys (Preview) from the Manage sidebar.
Step 6 - Click Show Recovery Key.
Outcome
You have successfully retrieved the BitLocker key for the device.
Back to top
How-To
Task: To access BitLocker recovery keys without the BitLocker key ID or device ID.
Instructions
Step 1 - Navigate to https://entra.microsoft.com/#home and login with your admin credentials. Example: adm_jbd1121@usnh.edu
Step 2 - Activate your Cloud Device Administrator role.
Step 3 - Select Users, then All users from the navigation menu on the left-hand side of the screen.
Step 4 - Enter the user ID in the provided field, and select the user.
Step 5 - Select Devices from the Manage sidebar, and select the device.
Step 6 - Select BitLocker keys (Preview) from the Manage sidebar.
Step 7 - Click Show Recovery Key.
Outcome
You have successfully retrieved the BitLocker key for the device.
Back to top
Further Readings
PIM Instructions - M365: Working in Microsoft Azure (ETS Internal)
Alternate Method - FLS Internal: Looking up BitLocker Recovery Keys (RSAT)