Windows 10: BitLocker Recovery Key - Cant Find - Secure Boot Policy Chg

After Windows 10 update, request for bitlocker recovery key is preventing me from using my computer. I've looked at all the suggested options to recover the key. I looked at my Microsoft account and do not have a bit locker recovery key. This is my private laptop. I don't have an admin. I see a recovery key ID to identify key. Any help will be appreciated. Im stuck.

:)

 

Asking for Bitlocker recovery key on login

So I was playing with BIOS settings for reformatting my laptop and reinstalling Windows using bootable USB drive. I didn't succeed and I probably did something stupid. Now I'm not able to login into my laptop. It's asking me for bitlocker recovery key on both disabled and enabled settings of secure boot.

On "Enabled" setting, it says "Bitlocker needs your recovery key to unlock your drive because Secure Boot policy has unexpectedly changed."




On "Disabled" setting, it says "Bitlocker needs your recovery key to unlock your drive because Secure Boot has been disabled. Either Secure Boot must be re-enabled, or Bitlocker must be suspended for Windows to start normally."




I don't have a recovery key. I don't remember setting one. I even searched for it in my Microsoft account. My device (ASUS X205TA) is listed but the recovery key is not.

Note that I don't have any useful data in the laptop, so I'd be fine with reinstalling windows even if I loose all the data. I just want to be able to use my laptop again.

 

Bitlocker recovery key

Hello,

I'm the IT user-support person in a company and I have this issue with a corporate laptop (belong to a domain & Active Directory):

I received from a user his laptop "dead" (no power-on, nothing to start-it). Accordingly to company security policies I deliver the laptop in service with another blank disk (the same SSD type) because the original one contained data.

After receiving the fixed laptop from service, I changed back the disks by putting the original one at it place.

Now, it occur the issue: at first step of booting it request the Bitlocker recovery key because the disk was bitlocker encrypted before.

The bad-luck is that I don't have this Bitlocker recovery key nowhere: on the printed paper, USB memory stick and not even on the Active Directory.

Is strange, because ussually, the other workstations (laptops with bitlocker activated) have this information on Active Directory.

Maybe because of a possible cause: the laptop owner use to work at home with the laptop and the Active Directory didn't synchronized the information related to Bitlocker recovery key (like for other laptop used in LAN).

I have the "Recovery key ID" on the blue screen for the laptop but is useless because I cannot find the "Bitlocker recovery key" on Active Directory using it.

What do you suggest to do in this case?

Many thanks for any advice and answer.

Mircea Dumitrescu.

 

BitLocker Recovery key not correct

Hi,



Thank you for writing to Microsoft Community Forums.



I understand that you are facing issues with BitLocker recovery key on your PC. I will certainly try my best to assist you with the issue.



Let’s try disabling secure boot on the PC. Follow the steps mentioned below and check if that helps.

1. Power the device off and then back on.
2. Look for a message on the boot screen just before or after the manufacturer logo appears. You may need to press the F1, F2, or Delete button, whatever key is indicated on the boot screen to enter BIOS Settings.
3. Inside BIOS, look for a tab called BOOT and select that page. Depending on the BIOS manufacturer, this page could be BOOT, ADVANCED, STARTUP, etc.
4. Look for a setting for UEFI Secure Boot. Each BIOS could have a different name for this. These are the keywords to look for: UEFI, Secure Boot, Legacy Boot.
5. Toggle the Secure Boot setting to disabled and attempt to boot the machine.

In addition, you can try disabling BitLocker using the manage bde commands and see if that helps. Try booting the PC in WinRE mode and then refer the article

Disable-BitLocker



Kindly follow the steps to boot to WinRE mode.

1. Reboot the PC using Power button and once you see the manufacturer logo press the power button again.
2. Repeat step 1 at least 2-3 times until you see the System Recovery Options screen
3. On the System Recovery Options screen, select
   Troubleshoot> Advanced options > Command Prompt.

If the issue persists, I would suggest you to post your query on TechNet
forums, where we have support professionals who are well equipped with the knowledge on issues related to Bit-Locker, to assist you with your query.



Regards,

Prakhar Khare

Microsoft Community – Moderator