# 查询加密状态
Get-BitLockerVolume -MountPoint 'E:'

# 用密码解锁
Unlock-BitLocker -MountPoint 'E:' -Password (ConvertTo-SecureString 'myPassword' -AsPlainText -Force)

# 启用加密（添加密码保护器 + 启用加密）
$securePassword = ConvertTo-SecureString 'myPassword' -AsPlainText -Force
Add-BitLockerKeyProtector -MountPoint 'E:' -PasswordProtector -Password $securePassword
Enable-BitLocker -MountPoint 'E:' -EncryptionMethod XtsAes256 -UsedSpaceOnly -RecoveryPasswordProtector

 1 // 需要引用 System.Management.Automation NuGet包
 2 using System.Management.Automation;
 3 
 4 public OperateResult<LocalBitLockerVolume> GetBitLocker(string mountPath)
 5 {
 6     var script = $"Get-BitLockerVolume -MountPoint '{mountPath}'";
 7     var result = PowerShellUtils.ExecScriptToDataList<LocalBitLockerVolume>(script);
 8     return result.ToResult<LocalBitLockerVolume>();
 9 }
10 
11 public OperateResult<List<LocalBitLockerVolume>> UnlockBitLocker(string mountPath, string password)
12 {
13     var script = $"Unlock-BitLocker -MountPoint '{mountPath}' " +
14                  $"-Password (ConvertTo-SecureString '{password}' -AsPlainText -Force)";
15     var result = PowerShellUtils.ExecScriptToDataList<LocalBitLockerVolume>(script);
16     // 注意：错误信息可能包含密码明文，需要脱敏
17     if (!result.Success && result.Message.Contains(password))
18     {
19         var msg = result.Message.Replace(password, "******");
20         return OperateResult<List<LocalBitLockerVolume>>.ToError(msg, result.Exception, result.Code);
21     }
22     return result;
23 }

 1 using System.Management;
 2 
 3 public class BitLockerWmiOperator
 4 {
 5     private const string WmiNamespace = @"root\CIMV2\Security\MicrosoftVolumeEncryption";
 6     private const string WmiClass = "Win32_EncryptableVolume";
 7 
 8     /// <summary>
 9     /// 查询BitLocker锁定状态
10     /// </summary>
11     public OperateResult<BitLockerVolumeInfo> GetBitLockerStatus(string mountPath)
12     {
13         try
14         {
15             using (var volume = GetEncryptableVolume(mountPath))
16             {
17                 if (volume == null)
18                     return OperateResult<BitLockerVolumeInfo>.ToError("Volume not found");
19 
20                 // 查询锁定状态
21                 var lockParams = volume.InvokeMethod("GetLockStatus", null, null);
22                 var lockStatus = Convert.ToUInt32(lockParams["LockStatus"]);
23 
24                 // 查询保护状态
25                 var protParams = volume.InvokeMethod("GetProtectionStatus", null, null);
26                 var protStatus = Convert.ToUInt32(protParams["ProtectionStatus"]);
27 
28                 return OperateResult<BitLockerVolumeInfo>.ToSuccess(new BitLockerVolumeInfo
29                 {
30                     IsLocked = lockStatus == 1,
31                     IsProtected = protStatus == 1
32                 });
33             }
34         }
35         catch (ManagementException ex)
36         {
37             return OperateResult<BitLockerVolumeInfo>.ToError($"WMI query failed: {ex.Message}", ex);
38         }
39     }
40 
41     /// <summary>
42     /// 用密码解锁BitLocker卷
43     /// </summary>
44     public OperateResult UnlockBitLocker(string mountPath, string password)
45     {
46         try
47         {
48             using (var volume = GetEncryptableVolume(mountPath))
49             {
50                 if (volume == null)
51                     return OperateResult.ToError("Volume not found");
52 
53                 var inParams = volume.GetMethodParameters("UnlockWithPassphrase");
54                 inParams["Passphrase"] = password;
55 
56                 var outParams = volume.InvokeMethod("UnlockWithPassphrase", inParams, null);
57                 var returnValue = Convert.ToUInt32(outParams["ReturnValue"]);
58 
59                 if (returnValue != 0)
60                     return OperateResult.ToError($"Unlock failed, error code: 0x{returnValue:X8}");
61 
62                 return OperateResult.ToSuccess();
63             }
64         }
65         catch (ManagementException ex)
66         {
67             return OperateResult.ToError($"WMI call failed: {ex.Message}", ex);
68         }
69     }
70 
71     private ManagementObject GetEncryptableVolume(string mountPath)
72     {
73         var scope = new ManagementScope(WmiNamespace);
74         scope.Connect();
75 
76         var query = new ObjectQuery(
77             $"SELECT * FROM {WmiClass} WHERE DriveLetter = '{mountPath.TrimEnd('\\')}'");
78         using (var searcher = new ManagementObjectSearcher(scope, query))
79         {
80             return searcher.Get().Cast<ManagementObject>().FirstOrDefault();
81         }
82     }
83 }

1 # 查询状态
2 manage-bde -status E:
3 
4 # 用密码解锁
5 manage-bde -unlock E: -pw
6 
7 # 启用加密
8 manage-bde -on E: -pw -em XtsAes256 -UsedSpaceOnly

 1 public OperateResult UnlockBitLocker(string mountPath, string password)
 2 {
 3     // manage-bde -unlock 使用 -pw 参数会弹出交互式密码输入
 4     // 通过重定向stdin传入密码
 5     var process = new Process
 6     {
 7         StartInfo = new ProcessStartInfo
 8         {
 9             FileName = "manage-bde.exe",
10             Arguments = $"-unlock {mountPath.TrimEnd('\\')} -pw",
11             RedirectStandardInput = true,
12             RedirectStandardOutput = true,
13             RedirectStandardError = true,
14             UseShellExecute = false,
15             CreateNoWindow = true
16         }
17     };
18     process.Start();
19     // manage-bde会提示输入密码，通过stdin写入
20     process.StandardInput.WriteLine(password);
21     process.StandardInput.Close();
22 
23     // 注意：需要先读取输出再WaitForExit，否则可能死锁
24     var stdout = process.StandardOutput.ReadToEnd();
25     var stderr = process.StandardError.ReadToEnd();
26     process.WaitForExit(30000);
27 
28     if (process.ExitCode == 0)
29         return OperateResult.ToSuccess();
30 
31     // 注意脱敏：stderr中不应包含密码，但保险起见做替换
32     var errorMsg = stderr.Contains(password) ? stderr.Replace(password, "******") : stderr;
33     return OperateResult.ToError($"manage-bde failed, exit code {process.ExitCode}: {errorMsg}");
34 }

 1 // P/Invoke声明（未文档化，签名基于逆向工程推断）
 2 [DllImport("fveapi.dll", CharSet = CharSet.Unicode, SetLastError = true)]
 3 static extern int FveOpenVolumeW(
 4     string volumePath,
 5     uint accessFlags,
 6     out IntPtr volumeHandle);
 7 
 8 [DllImport("fveapi.dll", SetLastError = true)]
 9 static extern int FveCloseVolume(IntPtr volumeHandle);
10 
11 [DllImport("fveapi.dll", SetLastError = true)]
12 static extern int FveGetStatus(
13     IntPtr volumeHandle,
14     out FVE_STATUS status);   // 包含锁定状态、加密百分比等
15 
16 [DllImport("fveapi.dll", SetLastError = true)]
17 static extern int FveUnlockVolume(
18     IntPtr volumeHandle,
19     IntPtr authData,          // 由FveAuthElementFromPassPhraseW构造
20     uint authDataSize);
21 
22 // 使用模式：Open → 操作 → Close
23 public OperateResult UnlockBitLocker(string mountPath, string password)
24 {
25     int hr = FveOpenVolumeW(mountPath, ACCESS_READ_WRITE, out IntPtr handle);
26     if (hr != 0)
27         return OperateResult.ToError($"Open volume failed: 0x{hr:X8}");
28 
29     try
30     {
31         // 构造密码认证元素
32         hr = FveAuthElementFromPassPhraseW(password, out IntPtr authData, out uint authSize);
33         if (hr != 0)
34             return OperateResult.ToError($"Create auth element failed: 0x{hr:X8}");
35 
36         try
37         {
38             hr = FveUnlockVolume(handle, authData, authSize);
39             if (hr != 0)
40                 return OperateResult.ToError($"Unlock failed: 0x{hr:X8}");
41 
42             return OperateResult.ToSuccess();
43         }
44         finally
45         {
46             FveCloseHandle(authData);
47         }
48     }
49     finally
50     {
51         FveCloseVolume(handle);
52     }
53 }

 1 public OperateResult UnlockBitLocker(string mountPath, string password)
 2 {
 3     // 主路径：WMI
 4     var wmiResult = TryUnlockViaWmi(mountPath, password);
 5     if (wmiResult.Success)
 6         return wmiResult;
 7 
 8     // 仅WMI环境问题才fallback（非业务错误如密码错误不fallback）
 9     if (IsWmiEnvironmentError(wmiResult))
10     {
11         _logger.Warn("WMI unavailable, fallback to manage-bde");
12         return TryUnlockViaManageBde(mountPath, password);
13     }
14 
15     return wmiResult;
16 }