Since Ubuntu 18.04, Dislocker is available in the Ubuntu Universe packages. It can be installed using
sudo apt install dislocker
You may need to
sudo add-apt-repository universe
sudo apt update
First, we make two folders, /media/bitlocker
and /media/mount
:
sudo mkdir /media/bitlocker /media/mount
Then, download and then extract Dislocker.
You'll want to install some needed packages:
sudo apt-get install libfuse-dev
To install it, we need to change directory to the dislocker
folder:
cd dislocker
Depending on your operating system, you'll need to choose one of
these:
For Debian-like distos based on Debian Jessie or Ubuntu 14.04 or older:
aptitude install gcc cmake make libfuse-dev libpolarssl-dev ruby-dev
For Debian-like distos based on Debian Stretch or Ubuntu 16.04 or later:
aptitude install gcc cmake make libfuse-dev libmbedtls-dev ruby-dev
Now we finally install dislocker:
cmake .
make
sudo make install
Here, we need to find our partition so we dont erase all of our drives accidentally:
sudo fdisk -l
If we have a recovery password, we can decrypt it using this:
sudo dislocker -r -V /dev/sdaX -p1536987-000000-000000-000000-000000-000000-000000-000000 -- /media/bitlocker
PS: You should replace 1536987-000000-000000-000000-000000-000000-000000-000000
with your recovery password.
If you know your password, we can just use that too:
sudo dislocker -r -V /dev/sdaX -uPASSWORD -- /media/bitlocker
Pssst: Replace PASSWORD
with your User password. Attention: keep the u
before the password! So, if your password is UbuntuLover
, you shall use uUbuntuLover
after the hyphen.
If your disk is mounted to sdb, use option sdb1.
If you are decrypting with a recovery file then use "path/to/.BEK" instead:
sudo dislocker-fuse -V /dev/sdcX -f /media/user/usb-drive/00000000-0X0X-0XX0-XXX0-XXXX0XXX00XX.BEK -- /media/bitlocker
Now, we finally mount our file:
sudo -i
cd /media/bitlocker
mount -r -o loop dislocker-file /media/mount
(If the mount above fails with "Permission denied" add the -r
option and try again.)
Now you can move to the /media/mount folder and see your decrypted data.
Read the source for more information and details.
Best Answer
This question contains a discussion of accessing bitlocker encrypted volumes in Linux. In summary, experimental tools exist, but it is unconfirmed if they work or not. It does not appear that there is an easy way of doing this.