Manage-bde: KeyPackage


Applies To: Windows 8.1, Windows Server 2012, Windows 8

Generates a key package for a drive. The key package can be used in conjunction with the repair tool to repair corrupted drives. For examples of how this command can be used, see Examples.


manage-bde -KeyPackage [<Drive>] [-ID <KeyProtectoryID>] [-path <PathToExternalKeyDirectory>] [-computername <Name>] [{-?|/?}] [{-help|-h}]





Represents a drive letter followed by a colon.


Create a key package using the key protector with the identifier specified by this ID value.


Location in which to save the key package created.


Specifies that Manage-bde.exe will be used to modify BitLocker protection on a different computer. You can also use -cn as an abbreviated version of this command.


Represents the name of the computer on which to modify BitLocker protection. Accepted values include the computer's NetBIOS name and the computer's IP address.

-? or /?

Displays brief Help at the command prompt.

-help or -h

Displays complete Help at the command prompt.


The following example illustrates using the -KeyPackage command to create a key package for drive C based off the key protector identified by the GUID and to save the key package to F:\Folder.

manage-bde -KeyPackage C: -id {84E151C1...7A62067A512} -path "f:\Folder"


Use manage-bde –protectors –get along with the drive letter that you want to create a key package for to get a list of available GUIDs to use as the ID value.

Additional references