If Active Directory is not showing BitLocker recovery key tab, install RSAT BitLocker Recovery, register the BitLocker ADUC ...
They made using PowerShell effortless.