Feature Request: inventory of Bitlocker recovery keys

[joschi99]

It should be a great feature to inventory automatically the Bitlocker recovery key (if enabled) and store it on GLPI. This Powershell script will print out the bitlocker recovery key.

PS C:\WINDOWS\system32> (Get-BitLockerVolume -MountPoint C).KeyProtector


KeyProtectorId      : {45746C0A-A195-458F-A6D8-41DEDB6AC141}
AutoUnlockProtector :
KeyProtectorType    : Tpm
KeyFileName         :
RecoveryPassword    :
KeyCertificateType  :
Thumbprint          :

KeyProtectorId      : {8AD7A16F-8BCC-41E6-A7E7-BA6D51AA29EB}
AutoUnlockProtector :
KeyProtectorType    : RecoveryPassword
KeyFileName         :
RecoveryPassword    : 440869-111331-007084-565114-001694-357984-236258-XXXXXX
KeyCertificateType  :
Thumbprint          :

[g-bougard]

Hi @joschi99

firstly feature requests shsould be posted in related Ideas discussions. I'll migrate this one for you.

IMHO, I'm not sure such sensible data should be managed in GLPI.

But if you still want it, maybe Collect task could still do the job. Check this FAQ, it may help: https://faq.teclib.com/02_FAQ/Inventory/#how-to-configure-wmi-collection

[SL-Gundam]

We already inventoring everything about the machine in GLPI.
The bitlocker keys should be part of the data. I believe it could exist per volume. So a collect task on a per volume level and storing the information on a volume level could be problematic at the moment.