external help file | Module Name | online version | schema |
---|---|---|---|
DSInternals.PowerShell.dll-Help.xml |
DSInternals |
2.0.0 |
Reads the Boot Key (AKA SysKey or System Key) from an online or offline SYSTEM registry hive.
Get-BootKey [-SystemHiveFilePath] <String> [<CommonParameters>]
Get-BootKey [-Online] [<CommonParameters>]
The BootKey/SysKey is an encryption key that is stored in the Windows SYSTEM registry hive. This key is used by several Windows components to encrypt sensitive information like the AD database, machine account password or system certificates etc.
The Boot Key is returned in hexadecimal format.
PS C:\> Get-BootKey -Online
0be7a2afe1713642182e9b96f73a75da
Retrieves the BootKey from the currently running OS.
PS C:\> reg.exe SAVE HKLM\SYSTEM C:\RegBackup\SYSTEM.hiv
PS C:\> $key = Get-BootKey -SystemHiveFilePath C:\RegBackup\SYSTEM.hiv
Creates a backup of the SYSTEM registry hive and then retrieves the BootKey from this backup.
Specifies that the action is to be taken on the operating system that is currently running on the local computer.
Type: SwitchParameter
Parameter Sets: Online
Aliases:
Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
Path to an offline SYSTEM registry hive.
Type: String
Parameter Sets: Offline
Aliases: Path, FilePath, SystemHivePath, HivePath
Required: True
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.
Get-ADDBAccount Get-ADDBBackupKey Set-ADDBAccountPassword Set-ADDBAccountPasswordHash Set-ADDBBootKey