How can I change a bitlocker startup key - bitlocker being used without a TPM - such that the old startup key(s) will no longer unlock the computer? (For example, if a startup key is lost). Is there a quicker method than completely decrypting the drive then re-encrypting it?

Hi, To change the Bitlocker startup key, please try the following commends. manage-bde -protectors -delete C: -type externalkey manage-bde -protectors -add C: -startupkey <PathToExternalKeyDirectory> Manage-bde: protectors http://technet.microsoft.com/en-us/library/ff829848(v=ws.10).aspx If you lost startup key, you can try BitLocker Repair Tool to recover a drive. http://technet.microsoft.com/en-us/library/ee523219(v=ws.10).aspx However, if it doesn't work, a forgotten PIN or a lost startup key can render the volume permanently inaccessible. Therefore, I strongly recommend storing BitLocker recovery passwords in Active Directory to avoid data loss as a result of lost startup keys or forgotten PINs Niki Han TechNet Community Support

Hi, Any update? Niki TechNet Subscriber Support If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.Niki Han TechNet Community Support

I haven't tested anything yet.

Hi, As this thread has been quiet for a while, I assume the issue has been resolved. At this time, we will mark it as "Answered" as the previous steps should be helpful for many similar scenarios. If the issue still persists, please feel free to reply this post directly so we will be notified to follow it up. You can also choose to unmark the answer as you wish. BTW, we'd love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems. Thanks for your understanding and efforts. Niki TechNet Subscriber Support If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here. Niki Han TechNet Community Support