<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Implementing Endpoint Encryption Management

## Commands

| Command | Description |
|---|---|
| `manage-bde -status` | Check BitLocker encryption status |
| `Get-BitLockerVolume` | Get BitLocker volume details |
| `Enable-BitLocker` | Enable BitLocker encryption |
| `fdesetup status` | Check FileVault status on macOS |
| `cryptsetup luksDump` | Inspect LUKS header and key slots |
| `Get-IntuneDeviceEncryptionStatus` | Query Intune for encryption compliance |
| `BackupToAAD-BitLockerKeyProtector` | Escrow BitLocker key to Azure AD |

## Agent Script

```bash
# node agent.js status --hostname <value>
# node agent.js deploy --platform <value> --policy <value>
# node agent.js compliance
```
