Windows 10: How to get bitlocker key for a pre-installed Windows10 new laptop

Hi, I just received my new HP Envy x360 ar0118au model laptop yesterday from Amazon. It came with pre-installed Windows 10 Home. I have to update the BIOS but I am unable to find the bitlocker recovery key using the procedure given by HP. I logged into the microsoft account, but it says the below:


You don't have any BitLocker recovery keys uploaded to your Microsoft account.

Note: If someone else helped you set up your PC, the BitLocker keys you're looking for might be on their account.


For the new laptops that are ordered online and delivered by Amazon, how do we get the bitlocker keys since we don't know who setup the encryption?


Note: I didn't had any microsoft account till yesterday. I created one while activating the Microsoft Office Home & Student edition. Not sure if this is anyways related to this issue.


Any help is really appreciated.


Regards,

Alok

:)

 

BitLocker Key

There may be a software that triggered the BitLocker in your Windows 10 PC. To assist you better, we suggest that you check these articles for further information:

• Find my BitLocker recovery key.
• BitLocker recovery keys: Frequently asked questions.

• BitLocker

Let us know if you need further assistance.

 

Including Bitlocker Pre-Provisioning


Hi @Kari,

That was an awesome Tutorial, exactly what I've been looking for !

I have been doing a bit of experimenting and found that a slight modification to your procedure can be used to pre-provision Bitlocker encryption, as long as the machine has a TPM chip present and activated on the motherboard. This pre-provisioning, if successful, could save a few hours as compared to configuring it post-install.
Note: all of the following worked on Win 10 Enterprise x64 1709 on both an old Laptop (non-UEFI, non-Secure Boot e.g. a 10 year old Dell Latitude E4200 ) and a modern desktop (Dell Optiplex 5040 w UEFI and Secure Boot).
All that's needed is to insert a step between 2.6 and 2.7 which would check if the destination drive is encryptable, and, if it is then enable encryption of used space. Because the 'used space' at that point is almost zero it gets encrypted almost instantaneously. But, because the drive is now encrypted, anything that DISM adds to the drive gets encrypted on the fly ! End result is that when the installation is finished the drive is encrypted with Bitlocker and just needs a 'protector' (e.g. TPM and PIN) added ..

Here's what worked for me ....
- just after step 2.6, check that G: drive is actually encryptable (this also checks the BIOS, TPM activated etc.)
run command 'manage-bde -status' (if that lists the volume as encryptable, then we're good to go to next ..)
run command 'manage-bde -on G: -used' (that turns on bitlocker for the drive, and should finish after a few seconds ...... just wait a few seconds and verify that another 'manage-bde -status' now shows 100%)
- .. now proceed to step 2.7

At the end of the installation and after first bootup and logon you should see a little yellow triangle as well as an unlock icon on the drive, showing it's encrypted but with a 'clear protector' ...... then just need to add a protector, like TPM and PIN e.g. 'manage-bde -protectors -add c: -TPMAndPIN' where you will be prompted for PIN, and if all goes well, will be prompted to enter PIN in order for machine to boot up.

 

Bitlocker Recovery Keys keeps appearing

Click on the start icon and type bitlocker. Click on the top entry in the list for Manage Bitlocker. In the Window that opens, turn BitLocker off. I noticed that Windows 10 Pro ver 1803, when I installed it on my laptop, encrypted the drive without asking me if I wanted it encrypted or not and I was getting the screen to enter a key after I attempted to install a second boot menu entry.