If Active Directory is not showing BitLocker recovery key tab, install RSAT BitLocker Recovery, register the BitLocker ADUC ...