manage-bde -protectors -get Volume {-Type|-t} {RecoveryPassword| ExternalKey| Certificate| TPM| TPMAndStartupKey| TPMAndPIN| ...

manage-bde -protectors -get Volume
                            [{-Type|-t} {RecoveryPassword| ExternalKey|
                                         Certificate| TPM| TPMAndStartupKey|
                                         TPMAndPIN| TPMAndPINAndStartupKey|
                                         Password| Identity}]
                            [-ID KeyProtectorID]
                            [{-SaveExternalKey|-sek}
                                PathToExternalKeyDirectory]
                            [{-ComputerName|-cn} ComputerName]
                            [{-?|/?}] [{-Help|-h}]

Description:
    Displays key protection methods. All key protectors are shown unless
    optional parameters are used.

Parameter List:
    Volume      A drive letter followed by a colon, a volume GUID path or
                a mounted volume. Example: "C:",
                \\?\Volume{26a21bda-a627-11d7-9931-806e6f6e6963}\ or
                "C:\MountVolume"
    -Type or -t Displays key protectors of a certain type. Optional.
    -id         Displays the key protector with a certain identifier. Optional.
    -SaveExternalKey or -sek
                Provide the absolute directory path to save file(s) containing
                displayed external key(s). These external key files may be
                used as startup or recovery keys.
    -ComputerName or -cn
                Runs on another computer. Examples: "ComputerX", "127.0.0.1"
    -? or /?    Displays brief help. Example: "-ParameterSet -?"
    -Help or -h Displays complete help. Example: "-ParameterSet -h"

Examples:
    manage-bde -protectors -get C:
    manage-bde -protectors -get C: -Type recoverypassword
    manage-bde -protectors -get C: -SaveExternalKey "f:\Folder"