How to add Bitlocker Encryption Key

Autopsy Help
1

Hi folks,
apologies, done the usual searching on this and coming up dry…

the online docs and search results suggest that if Autopsy encounters a Bitlocker protected volume, it should ask for the password/recovery key, but that is not the experience I see.

instead, when I add data source and select the disk, the disk is analysed, and i get an error in the log;

Errors occurred while ingesting image

  1. BitLocker initialization failed (Password required to decrypt volume )

I have hunted, but cannot see a dialog to let me enter the Recovery key (which I have on hand for this device)

this particular device has a boot sector and small FAT volume, then a larger NTFS bitlocker volume; I am able to see the contents of the FAT volume with no issues, so happy that the basics are working as expected.

I assume the error is in my process, so what am I missing?

2

How exactly are you trying to add your disk image? You shouldn’t be able to get past the Select Data Source panel - it displays a warning if the image is BitLocker-protected.

bl1
bl1883×561 25.2 KB

Once you enter the correct password the warning goes away and you can continue.

bl2
bl2903×579 24.3 KB