Get-BitLockerVolume
Gets information about volumes that BitLocker can protect.
Syntax
Get-BitLockerVolume
[[-MountPoint] <String[]>]
[<CommonParameters>]
Description
The Get-BitLockerVolume cmdlet gets information about volumes that BitLocker Drive Encryption can protect. You can specify a BitLocker volume by drive letter, followed by a colon (C:, E:). If you do not specify a drive letter, this cmdlet gets all volumes for the current computer.
You can use this cmdlet to get BitLocker volumes to use with other cmdlets, such as the Enable-BitLocker cmdlet or the Add-BitLockerKeyProtector cmdlet. You can also use this cmdlet to view the following information about a BitLocker volume:
- VolumeType - Data or Operating System.
- Mount Point - Drive letter.
- CapacityGB - Size of drive.
- MetadataVersion - Returns the FVE metadata version of the volume.
- 0 - Unknown - The operating system is unknown.
- 1 - Vista - Windows Vista format, meaning that the volume was protected with BitLocker on a computer running Windows Vista.
- 2 - Win7 - Windows 7 format, meaning that the volume was protected with BitLocker on a computer running Windows 7 or the metadata format was upgraded by using the UpgradeVolume method.
- VolumeStatus - Whether BitLocker currently protects some, all, or none of the data on the volume.
- Encryption Percentage - Percent of the volume protected by BitLocker.
- KeyProtector - Type of key protector or protectors.
- AutoUnlock Enabled - Whether BitLocker uses automatic unlocking for the volume.
- Protection Status - Whether BitLocker currently uses a key protector to encrypt the volume encryption key.
- EncryptionMethod - Indicates the encryption algorithm and key size used on the volume.
See BitLocker Overview for more information.
For an overview of encryption methods, see GetEncryptionMethod method.
Examples
Example 1: Get all BitLocker volumes
PS C:\> Get-BitLockerVolume
VolumeType Mount CapacityGB VolumeStatus Encryption KeyProtector AutoUnlock Protection
Point Percentage Enabled Status
---------- ----- ---------- ------------ ---------- ------------ ---------- ----------
Data D: 931.51 EncryptionInProgress 1 {RecoveryPassword, Pas... Off
Data E: 928.83 FullyDecrypted 0 {} Off
OperatingSystem C: 232.54 FullyDecrypted 0 {Tpm} Off
Data F: 0.98 FullyDecrypted 0 {} Off
Data G: 1.70 FullyDecrypted 0 {} Off
This command gets all the BitLocker volumes for the current computer.
Example 2: Get a specific BitLocker volume
PS C:\> Get-BitLockerVolume -MountPoint "E:"
VolumeType Mount CapacityGB VolumeStatus Encryption KeyProtector AutoUnlock Protection
Point Percentage Enabled Status
---------- ----- ---------- ------------ ---------- ------------ ---------- ----------
Data E: 928.83 FullyDecrypted 0 {} Off
This command gets the specified BitLocker volume.
Example 3: Get all attributes for a specific BitLocker volume
PS C:\> Get-BitLockerVolume -MountPoint C | Format-List
ComputerName : DESKTOP-XXXXXXX
MountPoint : C:
EncryptionMethod : XtsAes128
AutoUnlockEnabled :
AutoUnlockKeyStored : False
MetadataVersion : 2
VolumeStatus : FullyEncrypted
ProtectionStatus : On
LockStatus : Unlocked
EncryptionPercentage : 100
WipePercentage : 0
VolumeType : OperatingSystem
CapacityGB : 218,2344
KeyProtector : {RecoveryPassword, Tpm}
This command lists all BitLocker related attributes for C drive.
Parameters
-MountPoint
Specifies an array of drive letters. This cmdlet gets these BitLocker volumes.
Type: | String[] |
Position: | 0 |
Default value: | None |
Required: | False |
Accept pipeline input: | True |
Accept wildcard characters: | False |
Inputs
BitLockerVolume[], String[]
Outputs
BitLockerVolume[]