DisableKeyProtectors method of the Win32_EncryptableVolume class

The DisableKeyProtectors method of the Win32_EncryptableVolume class disables or suspends all key protectors associated with this volume.

Syntax

uint32 DisableKeyProtectors(
  [in, optional] uint32 DisableCount
);

Parameters

DisableCount [in, optional]

Type: uint32

Integer that specifies the number of reboots for which the key protectors will be disabled. This parameter is only available on OS volumes.

Return value

Type: uint32

This method returns one of the following codes or another error code if it fails.

Return code/value Description
S_OK
0 (0x0)
The method was successful.
FVE_E_LOCKED_VOLUME
2150694912 (0x80310000)
The volume is locked.

 

Security Considerations

This method exposes the volume's encryption key in the clear on the hard disk, turning off any volume protection. We recommend against having any password or encryption key in plaintext.

Remarks

New key protectors can be added even when key protectors are disabled or suspended. These key protectors will remain disabled unless EnableKeyProtectors is called.

Managed Object Format (MOF) files contain the definitions for Windows Management Instrumentation (WMI) classes. MOF files are not installed as part of the Windows SDK. They are installed on the server when you add the associated role by using the Server Manager. For more information about MOF files, see Managed Object Format (MOF).

Requirements

Requirement Value
Minimum supported client
Windows 8.1 [desktop apps only]
Minimum supported server
Windows Server 2012 R2 [desktop apps only]
Namespace
Root\CIMV2\Security\MicrosoftVolumeEncryption
MOF
Win32_encryptablevolume.mof

See also

Win32_EncryptableVolume

EnableKeyProtectors