backupkeys

sekurlsa::backupkeys lists the preferred Backup Master keys. It has the following command line argument:
/export: save the keys to a file
This command requires elevated privileges (by previously running privilege::debug or by executing Mimikatz as the NT-AUTHORITY\SYSTEM account).
mimikatz # sekurlsa::backupkeys
​
Current prefered key:       {557ab280-17fe-6ce9-8590-52cf907df75e}
​
Compatibility prefered key: {ad25fae4-a7f2-c7a0-1a9c-4c6f8b5ad34f}
sekurlsa
bootkey
Last modified 1yr ago