Page 1 of 1

Bitlocker Control functions

Posted: Fri May 09, 2025 2:05 pm
by jstreet
We are getting this error when attempting to remove a key Protector.


Removing Key Protector on drive [C] from [Agent Name]

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -ImportSystemModules -ExecutionPolicy Bypass -command "$BLV = Get-BitLockerVolume -MountPoint C: ; Remove-BitLockerKeyProtector -MountPoint C: -KeyProtectorId $BLV.KeyProtector[1].KeyProtectorId "
Removal of Key Protector Failed with ->
Remove-BitLockerKeyProtector : Cannot validate argument on parameter 'KeyProtectorId'. The argument is null or empty.
Provide an argument that is not null or empty, and then try the command again.
At line:1 char:105
+ ... or -MountPoint C: -KeyProtectorId $BLV.KeyProtector[1].KeyProtectorId
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidData: (:) [Remove-BitLockerKeyProtector], ParameterBindingValidationException
+ FullyQualifiedErrorId : ParameterArgumentValidationError,Remove-BitLockerKeyProtector

Re: Bitlocker Control functions

Posted: Fri May 09, 2025 8:08 pm
by Cubert
Remove-BitLockerKeyProtector : Cannot validate argument on parameter 'KeyProtectorId'. The argument is null or empty.

If you open the VolumeList and verify that the key you are removing has an ID? We need to have an ID for the keyprotector before we can delete it successfully. A scan should pick up any volume key protectors and their IDs if they exist. Maybe a scan has not fully completed on this agent?

Screenshot 2025-05-09 160707.png
Screenshot 2025-05-09 160707.png (38.66 KiB) Viewed 424 times