added check for tpm

amidaware · Mar 19, 2024 · 36c57da · 36c57da
1 parent 27c365f
commit 36c57da
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/scripts_wip/Win_ManageBitlocker.ps1 b/scripts_wip/Win_ManageBitlocker.ps1
@@ -139,9 +139,10 @@ function Win_ManageBitlocker {
                                     Write-Output "Volume already encrypted or in process"
                                 }
 
-                                #Check for recovery password, add if missing
+                                #Check for recovery password, add if missing and we have Tpm
+                                $tpmProtector = $vol.KeyProtector | Where-Object { $_.KeyProtectorType -eq "Tpm" }
                                 $recoveryPassword = $vol.KeyProtector | Where-Object { $_.KeyProtectorType -eq "RecoveryPassword" }
-                                if (-Not($recoveryPassword)) {
+                                if (-Not($recoveryPassword) -and $tpmProtector) {
                                     Write-Output "Adding recovery password"
                                     $vol | Add-BitLockerKeyProtector -RecoveryPasswordProtector -InformationAction SilentlyContinue | Out-Null
                                 }