A Boolean value that indicates whether the process creates a recovery key for BitLocker. The key is used for recovering data encrypted on a BitLocker volume. This key is cryptographically equivalent to a startup key. If available, the recovery key decrypts the VMK, which, in turn, decrypts the FVEK.
Caution This property value must be specified in uppercase letters so that the deployment scripts can properly read it.
Property configured by |
|
|
Property applies to |
|
BootStrap.ini |
|
|
LTI |
˜ |
CustomSettings.ini |
˜ |
|
|
|
MDT DB |
˜ |
|
ZTI |
˜ |
Value |
Description |
AD |
A recovery key is created. |
Not specified |
A recovery key is not created. |
Example |
[Settings] Priority=Default
[Default] BDEInstallSuppress=NO BDEDriveLetter=S: BDEDriveSize=2000 OSDBitLockerMode=TPMKey OSDBitLockerCreateRecoveryPassword=AD OSDBitLockerStartupKeyDrive=C: |
Related Topics