> How can you rotate the bitlocker key? I was under the impression that it’s permanent.
The actual key key is not changeable, but the "recovery key" is not actually the key (or a representation of it) but is another password that unlocks the actual key. As already mentioned, this can be done in one click on an admin console, and even on personal systems you could change it (even to all zeroes if you're stupid enough) using the manage-bde command-line program.
