Feature request: Entra ID Backup - BitLocker Keys

[jnagler]

I would like to submit a feature request for the Entra ID Backup solution.

We are receiving more and more customer inquiries to be able to back up and restore the Bitlocker keys in Microsoft Entra with Veeam.
According to Veeam (Support - Case # 07606425), this is unfortunately not possible so far.

Is there a possibility to make this feature available in a future release?

[Mildur]

Hi Jürgen,

Welcome to the forum.

I moved your request to the VBR main forum because your question isn’t related to Hyper-V.

Currently, BitLocker keys are not protected. You can find a list of protected objects and properties in our Help Center.

Regarding your request: as long as there is an API to export data, we can potentially protect it. However, restore is a different topic, since some properties are auto-generated and cannot be written back to Entra ID. I believe there is an API available for retrieving BitLocker keys.

May I ask what your use case is for protecting the recovery key? Do you want to be able to export a list of all BitLocker recovery keys for all machines, even if Entra ID is down?

Best,
Fabian

[Gostev]

@Mike Resseler this is already planned right? So we should know the answers to all the questions already?

[Mike Resseler]

@gostev @jnagler
Yes, this indeed already planned.
BitLocker keys can be protected, however, there is no possibility to restore those. In the future, per device (that supports it) you will be able to download the BitLocker key(s) for manual input if you need to unlock a device (for example, when the device has been deleted or cannot connect to the network anymore or something similar)

[TWuser]

I'm going to assume the device is attached to the User, so licensing for the EntraID backups is directly tied to the Users?

For those of us used to on-prem, a single license to backup a DC would cover all machine accounts, including Bitlocker and LAPS, but for Entra it's a complete flip based on Users (unless I'm misunderstanding something).

[veremin]

You’re right, Entra ID licensing is built around user protection — we count instances based on the number of protected enabled members.