Intune-CoreImage - How to get your device's BitLocker recovery key


Introduction

Sometimes a CoreImage device goes into BitLocker recovery mode.  The device will show a blue screen titled "BitLocker recovery" as seen in the screenshots below.  One must use the Recovery key ID to retrieve the Recovery key for the drive.

With Intune-CoreImage devices, users can look up their devices' BitLocker recovery keys.  Users of Classic-CoreImage devices must still enter a ticket to HITS' Service Desk to get the key.

 

Related articles:

Instructions

This process can only be completed on a secondary device--not the one in BitLocker recovery mode.  The other device can be a personally owned one; it does not have to be another CoreImage device.  If you do not have access to another device, open a ticket with HITS.

  1. Note the BitLocker Recovery key ID.


  2. Open a web browser to https://www.office.com.


  3. Click on your account picture in the upper right.


  4. Click on View account in the box that appears.

  5. Click on Manage Devices to get a list of all Intune-CoreImage devices that you've enrolled (i.e., where you are the primary user.)


  6. Find your device's name in the list that is in BitLocker recovery mode.  If you do not see it, either it is not an Intune-CoreImage device, or you are not the primary user.  If you do not see the Device Name in the list, open a ticket with HITS.

  7. Click on device's name in the list.


  8. Click View BitLocker Keys.

  9. Find the Key ID in the list that you noted in step 1.


  10. Click on Show recovery key.

  11. Type in the revealed recovery key into the device that is in BitLocker Recovery mode.


  12. Complete the device booting up into Windows and log in.

  13. Reboot the device to make sure BitLocker recovery mode doesn't happen again.  If the device does go into BitLocker recovery mode again, open a ticket with HITS.