Here’s a helpful, concise guide on where BitLocker keys are stored in Active Directory (AD) and how to access them. BitLocker recovery passwords (and key packages) are stored in Active Directory as attributes of the computer object that has BitLocker enabled.