Bitlocker

full disk encryption from Microsoft!

manage-bde

• http://technet.microsoft.com/en-us/library/jj647767.aspx

specific bitlocker powershell cmdlets

• http://technet.microsoft.com/en-us/library/jj649829.aspx

manage-bde -protectors -get c:
Description:
    Configures BitLocker Drive Encryption on disk volumes.

BdeHdCfg.exe -target default -quiet 
Description:
  This command prepares your hard drive for BitLocker Drive Encryption.

  Command line parameters are not case-sensitive.

Wipe config

manage-bde C: -protectors -add -rp [optionally specify the new 48-digit password or enter nothing to have it randomly generated for you]
manage-bde C: -protectors -delete -id [paste the ID you copied here]
wipe tpm via tpm.msc

https://www.itsupportguides.com/knowledge-base/windows-7/windows-7-change-bitlocker-recovery-key/