manage-bde -on Volume [{-RecoveryPassword|-rp} [NumericalPassword] ] [{-RecoveryKey|-rk} PathToExternalKeyDirectory] [{-StartupKey|-sk} PathToExternalKeyDirectory] [{-Certificate|-cert} {-cf PathToCertificateFile| -ct CertificateThumbprint}] [{-TPMAndPIN|-tp}] [{-TPMAndStartupKey|-tsk} PathToExternalKeyDirectory] [{-TPMAndPINAndStartupKey|-tpsk} -tsk PathToExternalKeyDirectory] [{-Password|-pw}] [{-EncryptionMethod|-em} {aes128_diffuser| aes256_diffuser| aes128| aes256}] [{-SkipHardwareTest|-s}] [{-DiscoveryVolumeType|-dv} {FAT32|[none]|[default]}] [{-ComputerName|-cn} ComputerName] [{-?|/?}] [{-Help|-h}] Description: Encrypts the volume and turns BitLocker protection on. Parameter List: Volume A drive letter followed by a colon. Example: "C:" -RecoveryPassword or -rp Adds a Numerical Password protector. -RecoveryKey or -rk Adds an External Key protector for recovery. -StartupKey or -sk Adds an External Key protector for startup. -Certificate or -cert Adds a public key protector for the data volume. -TPMAndPIN or -tp Adds a TPM And PIN protector for the OS volume. -TPMAndStartupKey or -tsk Adds a TPM And Startup Key protector for the OS volume. -TPMAndPINAndStartupKey or -tpsk Adds a TPM And PIN And Startup Key protector for the OS volume. -Password or -pw Adds a password key protector for the data volume. -EncryptionMethod or -em Configures the encryption algorithm and key size. -SkipHardwareTest or -s Begins encryption without a hardware test. -DiscoveryVolumeType or -dv Specify file system to use for the discovery volume. -ComputerName or -cn Runs on another computer. Examples: "ComputerX", "127.0.0.1" -? or /? Displays brief help. Example: "-ParameterSet -?" -Help or -h Displays complete help. Example: "-ParameterSet -h" Examples: manage-bde -on C: -RecoveryPassword manage-bde -on C: -RecoveryKey e:\ -RecoveryPassword manage-bde -on C: -rp -rk "f:\Folder" -SkipHardwareTest manage-bde -on E: -pw
manage-bde -changepassword Volume {-ComputerName|-cn} ComputerName {-?|/?} {-Help|-h} Description: Modifies password for ...
manage-bde -changepin Volume {-ComputerName|-cn} ComputerName {-?|/?} {-Help|-h} Description: Modifies PIN for a volume. ...
manage-bde -lock Volume {-ForceDismount|-fd} {-ComputerName|-cn} ComputerName {-?|/?} {-Help|-h} Description: Prevents access ...
manage-bde -off Volume {-ComputerName|-cn} ComputerName {-?|/?} {-Help|-h} Description: Decrypts the volume and turns BitLocker ...
manage-bde -on Volume {-RecoveryPassword|-rp} NumericalPassword {-RecoveryKey|-rk} PathToExternalKeyDirectory {-StartupKey|-sk} ...
manage-bde -on Volume {-RecoveryPassword|-rp} NumericalPassword {-RecoveryKey|-rk} PathToExternalKeyDirectory {-StartupKey|-sk} ...
manage-bde -pause Volume {-ComputerName|-cn} ComputerName {-?|/?} {-Help|-h} Description: Pauses encryption or decryption. ...
manage-bde -protectors -adbackup Volume -ID KeyProtectorID {-ComputerName|-cn} ComputerName {-?|/?} {-Help|-h} Description: ...
manage-bde -protectors -add Volume {-ForceUpgrade} {-RecoveryPassword|-rp} NumericalPassword {-RecoveryKey|-rk} PathToExternalKeyDirectory ...