I am looking for the possibility to backup all the current system Drive Encryption keys in EPO. We have an EPO policy that will remove systems out of EPO if they haven't checked in for "x" number of days. While this keeps our EPO system clean of old or retired systems, we often need to do forensics or recovery on a system past that number of days. When that system is no longer in EPO, it almost becomes a lost cause at getting or accessing the data.
I would like the ability to backup these keys at the time of capture and store them until another backup is occured. Is this possible?