Skip to Main Content

Add feature to gather and retrieve bitlocker keys stored in MECM (SCCM)

We moved away from standalone MBAM and are now using MECM to encrypt an store bitlocker recovery keys.

Product Right Click Tools
  • Attach files
      Drop here to upload
    • Admin
      Bryan Thompson
      Reply
      |
      Apr 23, 2024

      As of Version 5.5.2404, this feature is now available for Right Click Tools.

      Please see release notes for more information.

    • Michael Lovett
      Reply
      |
      Sep 19, 2022

      Here a script you can use to export the data:

      #import-module sqlps <---- Only Needed if Not on a SQL Server Install

      # Back Up All Recovery Keys and TPM Ownership Passwords to Comma Delimited File for Excel

      $timer = (Get-Date) -replace "/","-" -replace " ","" -replace ":",""

      $path = "D:\backup\mbam\TPMOnwershipData"+ $timer +".csv"

      $SQLquery = 'Select * from RecoveryAndHardwareCore_machines'

      $Result = Invoke-Sqlcmd -query $SQLquery -ServerInstance 'sccm' -Database 'CM_SCCM'

      $Result |export-csv $path -NoTypeInformation

      $path = "D:\backup\mbam\BitlockerRecoveryKeys"+ $timer +".csv"

      $SQLquery = 'Select * from RecoveryAndHardwareCore_keys'

      $Result = Invoke-Sqlcmd -query $SQLquery -ServerInstance 'sccm' -Database 'CM_SCCM'

      $Result |export-csv $path -NoTypeInformation

      #Clean Up Files Older than 7 days

      $path = "D:\backup\mbam"

      $limit = (Get-Date).AddDays(-7)

      # Delete files older than the $limit.

      Get-ChildItem -Path $path -Recurse -Force | Where-Object { !$_.PSIsContainer -and $_.CreationTime -lt $limit } | Remove-Item -Force

      #Clean Up Backup Files Older than 14 days While we are at it

      $path = "F:\Backup\SCCM"

      $limit = (Get-Date).AddDays(-14)

      # Delete files older than the $limit.

      Get-ChildItem -Path $path -Recurse -Force | Where-Object { !$_.PSIsContainer -and $_.CreationTime -lt $limit } | Remove-Item -Force

      #Clean Up Backup Files Older than 3 days While we are at it

      $path = "C:\inetpub\logs\LogFiles"

      $limit = (Get-Date).AddDays(-3)

      # Delete files older than the $limit.

      Get-ChildItem -Path $path -Recurse -Force | Where-Object { !$_.PSIsContainer -and $_.CreationTime -lt $limit } | Remove-Item -Force

      exit

    • Edwin Bruining
      Reply
      |
      Aug 31, 2022

      Please do :)

    • Ryan Giddens
      Reply
      |
      Mar 29, 2022

      This would be extremely helpful.

    • Guest
      Reply
      |
      Jan 14, 2022

      Would like to see this implemented.

    • Richard Jones
      Reply
      |
      Jan 14, 2022

      This would be very helpful

    • +27