Skip to Main Content
50 VOTE
Status Recently shipped
Categories Security
Created by Guest
Created on Jan 14, 2022

Add feature to gather and retrieve bitlocker keys stored in MECM (SCCM)

We moved away from standalone MBAM and are now using MECM to encrypt an store bitlocker recovery keys.

Product Right Click Tools
  • Attach files
  • Admin
    Bryan Thompson
    Reply
    |
    Apr 23, 2024

    As of Version 5.5.2404, this feature is now available for Right Click Tools.

    Please see release notes for more information.

  • Michael Lovett
    Reply
    |
    Sep 19, 2022

    Here a script you can use to export the data:

    #import-module sqlps <---- Only Needed if Not on a SQL Server Install

    # Back Up All Recovery Keys and TPM Ownership Passwords to Comma Delimited File for Excel

    $timer = (Get-Date) -replace "/","-" -replace " ","" -replace ":",""

    $path = "D:\backup\mbam\TPMOnwershipData"+ $timer +".csv"

    $SQLquery = 'Select * from RecoveryAndHardwareCore_machines'

    $Result = Invoke-Sqlcmd -query $SQLquery -ServerInstance 'sccm' -Database 'CM_SCCM'

    $Result |export-csv $path -NoTypeInformation

    $path = "D:\backup\mbam\BitlockerRecoveryKeys"+ $timer +".csv"

    $SQLquery = 'Select * from RecoveryAndHardwareCore_keys'

    $Result = Invoke-Sqlcmd -query $SQLquery -ServerInstance 'sccm' -Database 'CM_SCCM'

    $Result |export-csv $path -NoTypeInformation

    #Clean Up Files Older than 7 days

    $path = "D:\backup\mbam"

    $limit = (Get-Date).AddDays(-7)

    # Delete files older than the $limit.

    Get-ChildItem -Path $path -Recurse -Force | Where-Object { !$_.PSIsContainer -and $_.CreationTime -lt $limit } | Remove-Item -Force

    #Clean Up Backup Files Older than 14 days While we are at it

    $path = "F:\Backup\SCCM"

    $limit = (Get-Date).AddDays(-14)

    # Delete files older than the $limit.

    Get-ChildItem -Path $path -Recurse -Force | Where-Object { !$_.PSIsContainer -and $_.CreationTime -lt $limit } | Remove-Item -Force

    #Clean Up Backup Files Older than 3 days While we are at it

    $path = "C:\inetpub\logs\LogFiles"

    $limit = (Get-Date).AddDays(-3)

    # Delete files older than the $limit.

    Get-ChildItem -Path $path -Recurse -Force | Where-Object { !$_.PSIsContainer -and $_.CreationTime -lt $limit } | Remove-Item -Force

    exit

  • Edwin Bruining
    Reply
    |
    Aug 31, 2022

    Please do :)

  • Ryan Giddens
    Reply
    |
    Mar 29, 2022

    This would be extremely helpful.

  • Guest
    Reply
    |
    Jan 14, 2022

    Would like to see this implemented.

  • Richard Jones
    Reply
    |
    Jan 14, 2022

    This would be very helpful

  • +27