Windows 10: Bitlocker turned on after changing secure boot settings

System: Surface Laptop 3, Windows 10 HomeIncident:I was fiddling around in the UEFI Settings and changed the Secure Boot option.After restarting the Laptop, Bitlocker turned on I forgot to disable it, before changing stuff in the UEFINow my problem is, I didn't back up my Bitlocker recovery key or password anywhere, because I didn't think about Bitlocker.I followed the "steps" described in this post, but I couldn't find a recovery key.So now my Laptop is stuck on Bitlocker recovery screen and I don't know how to unlock it.I've been thinking about creating a bootstick with a Windows 10 imag

:)

 

Secure Boot and Bitlocker

You don't need secure boot. You can have it on or off as you wish.

If you change the secure boot setting (on to off or vv) though by fiddling with the BIOS settings it will trigger a change that requires your whole 48 digit bitlocker key to be entered so if you want to change it suspend bitlocker and then restart (so you can make your BIOS change).

You need to do the same "suspend bitlocker/reboot" cycle for any other BIOS change that impacts on boot.

 

Secure Boot and Bitlocker

Doesn't matter either way.

I leave it off as I like to boot from USB sometimes so I don't like secure boot.

The only thing to consider is if you want to change it (either from "on to off" or "off to on") then you'll need to suspend bitlocker before you do or bitlocker will prompt you for a recovery key as it saw a change in boot setup.

Once bitlocker is running it will be OK until you change something (change a BIOS setting, try to boot from a different disk etc).

 

Need to turn off Bitlocker to install Windows 10

Hi,

We suggest doing the following steps again to resolve the issue. To complete the procedure, make sure that you have the following information:

• You must be able to provide administrative credentials.
• The drive must be BitLocker-protected.

To suspend BitLocker Drive Encryption on an operating system drive, please follow the steps below:

• Click Start, click Control Panel, click
  System and Security, and then click BitLocker Drive Encryption.
• Click Suspend Protection for the operating system drive.
• A message is displayed, informing you that your data will not be protected while BitLocker is suspended and asking if you want to suspend BitLocker Drive Encryption.
  
• Click Yes to continue and suspend BitLocker on the drive.

Let us know how it goes.