

To display TPM-related information: Get-WinEvent -FilterHashtable | Where-Object -Property Message -Match 'TPM' | fl To export BitLocker-related information: Get-WinEvent -FilterHashtable | Where-Object -Property Message -Match 'BitLocker' | Export-Csv -Path System-BitLocker.csv The output of such a command resembles the following: To display BitLocker-related information: Get-WinEvent -FilterHashtable | Where-Object -Property Message -Match 'BitLocker' | fl The Get-WinEvent can be used in an elevated PowerShell window to display filtered information from the system or application log by using the following syntax: To use the Get-WinEvent cmdlet to export the same log to a comma-separated text file, open a Windows PowerShell window and run the following command: Get-WinEvent -logname "Microsoft-Windows-BitLocker/BitLocker Operational" | Export-Csv -Path Bitlocker-Operational.csv To filter and display or export logs, the wevtutil.exe command-line tool or the Get-WinEvent PowerShell cmdlet can be used.įor example, to use wevtutil.exe to export the contents of the operational log from the BitLocker-API folder to a text file that is named BitLockerAPIOpsLog.txt, open a Command Prompt window, and run the following command: wevtutil.exe qe "Microsoft-Windows-BitLocker/BitLocker Operational" /f:text > BitLockerAPIOpsLog.txt

Microsoft-Windows-BitLocker-API/Tracing - only displayed when Show Analytic and Debug Logs is enabledīitLocker-DrivePreparationTool.Microsoft-Windows-BitLocker-API/Operational.Microsoft-Windows-BitLocker-API/Management.Review the Management log, the Operational log, and any other logs that are generated in this folder.

Open Event Viewer and review the following logs under Applications and Services Logs > Microsoft > Windows:īitLocker-API. This information makes the troubleshooting process much easier. This article also provides information such as what data to collect and what settings to check. This article addresses common issues in BitLocker and provides guidelines to troubleshoot these issues.
