Windows 10: Help with BitLocker Key Rotation using MECM - 2309

Help with BitLocker Key Rotation using MECM - 2309_________________________________________Hi All,Need some guidance on how to rotate BitLocker keys on MECM database and Active Directory once the keys have been disclosed.We have encrypted the machines using a Task Sequence and there are a lot of machines for which the keys have been disclosed.Any advice would be very much appreciated.Thank you!Prasad

:)

 

Recorded BitLocker Key / Swapped Drive / Permanently lost BitLocker Key?

The gist: Lenovo support recommended a drive swap (from corporate computer with broken screen to temporary one). Initially, the BitLocker key worked and now it fails. IT told me it cannot be salvaged.

Computers: Corporate Windows Lenovo ThinkPad P15 Gen2's and we use "Intune."

Steps:

1. I'm instructed by IT & Lenovo to send my computer in for repairs seemingly unrelated to the hard drive (monitor completely black with power on). Lenovo warns "ANY" repair can destroy all data and recommends a drive swap. Confirm with 3 Lenovo representatives this is okay for relative novice.
   
2. Record BitLocker key and perform the swap.
   
3. Restart temp computer, input key on blue screen and everything's good but Microsoft Teams.
   
4. Repeat step 3.
   
5. Restart temp computer, input key on blue screen and Teams works.
   
6. Restart temp computer and BitLocker no longer accepts the key.
   
7. Lenovo sends back fixed computer. Install original SSD. Screen is fixed, but BitLocker no longer accepts the key.
   
8. My Account shows two devices -- with the same name -- associated to me. The "Inactive" one has my recorded key. The "Active" one says, "No BitLocker recovery key found for this device."
   
9. IT says BitLocker keys should rotate when doing what I did. Initially, they failed to rotate -- the reason why steps 3 - 5 "worked." Then, the rotation happened -- step 6 -- but the new BitLocker key wasn't saved anywhere. I am currently assuming they would have checked something like the Azure Active Directory.
   
10. Part of me doesn't believe the BitLocker key couldn't have been saved anywhere. I know what I did isn't typical for an employee, but still there have to be a lot of drive swaps in the world -- saving BitLocker keys can't be this fragile.
    

I know this is long and appreciate any assistance. Have a good year in any event.

Sincerely,

Tim

 

BitLocker Key

There may be a software that triggered the BitLocker in your Windows 10 PC. To assist you better, we suggest that you check these articles for further information:

• Find my BitLocker recovery key.
• BitLocker recovery keys: Frequently asked questions.

• BitLocker

Let us know if you need further assistance.

 

bitlocker recovery key

Hi Singh,

Thank you for writing to Microsoft Community Forums.

In order to get clarity on this issue and assist you with appropriate troubleshooting steps, please reply with the answers to the questions below.

1. Are you not able login to your computer due to BitLocker Recovery Key?
2. Did you ever setup BitLocker Recovery Key on your computer?
3. Are you not able to login to your Microsoft Account to find the BitLocker Recovery Key?
4. Are you using Windows 10 Home or Windows 10 Professional?

Meanwhile, try finding BitLocker Recovery Key if you have ever setup BitLocker Recovery Key for your computer.

Please elaborate on the issue, so that we can understand the concern and get back to us to help you further.