Skip to content

Disable BitLocker

Starts BitLocker decryption on a selected volume and can optionally write the current recovery password to the job log before protection is disabled.

Required — Default: OS

Drive letter of the BitLocker volume to decrypt, for example C: or D:. You can also use OS or SystemDrive to target the operating system drive automatically.

Optional — Default: True

Writes the BitLocker recovery password to the PowerBrick log before decryption starts. Enabled by default; disable when logs should not contain the secret.

  • Category: System
  • Brick ID: BitLocker-Disable
{
"category": "system",
"description": "Starts BitLocker decryption on a selected volume and can optionally write the current recovery password to the job log before protection is disabled.",
"developerVendor": "CapaSystems A/S",
"displayName": null,
"id": "BitLocker-Disable",
"name": "Disable BitLocker",
"parameters": [
{
"allowManualInput": false,
"defaultValue": "OS",
"defaultValueObject": null,
"description": "Drive letter of the BitLocker volume to decrypt, for example C: or D:. You can also use OS or SystemDrive to target the operating system drive automatically.",
"id": "MountPoint",
"name": "Mount Point",
"regExValidation": "",
"required": true,
"type": "TextBox",
"value": null,
"values": [],
"valuesObject": null
},
{
"allowManualInput": false,
"defaultValue": "True",
"defaultValueObject": null,
"description": "Writes the BitLocker recovery password to the PowerBrick log before decryption starts. Enabled by default; disable when logs should not contain the secret.",
"id": "WriteRecoveryKeyToLog",
"name": "Write Recovery Key To Log",
"regExValidation": "",
"required": false,
"type": "Boolean",
"value": null,
"values": [],
"valuesObject": null
}
],
"powershell": {
"base64Encoded": true,
"function": "ZnVuY3Rpb2..."
},
"type": "powerbrick",
"version": "2026.9.1.1"
}