Command Line to disable BitLocker Startup Pin

Using the command line to manage two features in BitLocker.

1. Enable startup pin once the volume is already encrypted.
2. Disable the pin that is enabled in #1

I have sucessfully performed step 1 by using the following:
cscript %systemroot%\system32\manage-bde.wsf -protectors -add %systemdrive% -tpmandpin 1234

When I try to remove it with the following...
cscript %systemroot%\system32\manage-bde.wsf -protectors -delete C: -Type TPMAndPin

I get the BitLocker recovery when I start the PC. Apparently I am not removing it correctly.... any ideas?

Windows Vista

Last Comment

daanstam

8/22/2022 - Mon

ASKER CERTIFIED SOLUTION

Erik Bjers

4/9/2008

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.

View this solution by signing up for a free trial.

Members can start a 7-Day free trial and enjoy unlimited access to the platform.

See Pricing Options

Start Free Trial

GET A PERSONALIZED SOLUTION

Ask your own question & get feedback from real experts

Find out why thousands trust the EE community with their toughest problems.

awgit

4/9/2008

ASKER

Oh, yes I understand where i have TPMAndPin - I'll see if I can do just Pin and remove that part only.

thanks

Erik Bjers

4/9/2008

That I am not sure of, but you can try to find out.

Unfortunately my laptop does not support TPM so when I do bitlocker I have to store my decrypt key on a thumb drive. And while I like that as I feel it makes it more secure (just don't leave the thumb drive with the laptop) it has prevented me from getting experience with the TPM system.

eb

amaiman

6/2/2008

After you delete the TPMandPIN data: cscript %systemroot%\system32\manage-bde.wsf -protectors -delete C: -Type TPMAndPin

You can then re-enable "just TPM' support without a PIN with the following:
cscript %systemroot%\system32\manage-bde.wsf -protectors -add %systemdrive% -tpm

Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!

James Murphy

daanstam

10/14/2009

It is faster to disable Bitlocker:
Disable:
cscript manage-bde.wsf -protectors -disable c:

Or try to show the pin: