Bitlocker Control functions

This forum is used to support the BitLocker for Automate plugin. You will find documentation on the plugin as well as an area to post issues and requests. Please post
Post Reply
jstreet
Posts: 3
Joined: Thu May 01, 2025 3:44 pm

Bitlocker Control functions

Post by jstreet »

We are getting this error when attempting to remove a key Protector.


Removing Key Protector on drive [C] from [Agent Name]

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ImportSystemModules -ExecutionPolicy Bypass -command "$BLV = Get-BitLockerVolume -MountPoint C: ; Remove-BitLockerKeyProtector -MountPoint C: -KeyProtectorId $BLV.KeyProtector[1].KeyProtectorId "
Removal of Key Protector Failed with ->
Remove-BitLockerKeyProtector : Cannot validate argument on parameter 'KeyProtectorId'. The argument is null or empty.
Provide an argument that is not null or empty, and then try the command again.
At line:1 char:105
+ ... or -MountPoint C: -KeyProtectorId $BLV.KeyProtector[1].KeyProtectorId
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidData: (:) [Remove-BitLockerKeyProtector], ParameterBindingValidationException
+ FullyQualifiedErrorId : ParameterArgumentValidationError,Remove-BitLockerKeyProtector

User avatar
Cubert
Posts: 2676
Joined: Tue Dec 29, 2015 7:57 pm
9
Contact:

Re: Bitlocker Control functions

Post by Cubert »

Remove-BitLockerKeyProtector : Cannot validate argument on parameter 'KeyProtectorId'. The argument is null or empty.

If you open the VolumeList and verify that the key you are removing has an ID? We need to have an ID for the keyprotector before we can delete it successfully. A scan should pick up any volume key protectors and their IDs if they exist. Maybe a scan has not fully completed on this agent?

Screenshot 2025-05-09 160707.png
Screenshot 2025-05-09 160707.png (38.66 KiB) Viewed 193 times

Post Reply

Return to “BitLocker for Automate”