Using Intune to get BitLocker Recovery Keys

Using Intune to get BitLocker Recovery Keys

1. Login into Intune and Entra (intune.microsoft.com / entra.microsoft.com)
2. Go to Entra and select the ID Governance from the left menu. Click on Privileged Identity Management (PIM)
3. On the main page select the Activate Just In Time activation button
4. From the selection menu, choose BitLocker Recovery Key Reader and click on the Activate link on the right side
5. Use the default screen settings and time. Provide a short detail for the reason requesting access, in the box provided
6. When complete, click the blue Activate button on the lower, left of the screen.
7. Allow the process to run and reset the screen when it is completed
8. Switch to Intune and open the device you need. Once open select Recovery Keys from the inner left column
   ​​​​
9. Select the highlighted Show Recovery Key to view and copy the assigned BitLocker Key

FAQs