Windows 10: KB5012170 triggered BitLocker on a device that didn't originally have it enabled

KB5012170 triggered BitLocker on a device that didn't originally have it enabled, thus no key.My niece called me freaking out because she was in her first day of class and was getting prompted for the Bitlocker key. She never enabled Bitlocker, but somehow KB5012170 enabled it. She checked her Microsoft account, and there was no Bitlocker key associated with the affected device. Her laptop does not have a restore point. Microsoft should fix this. She wound up having to buy a new laptop because she needed it resolved immediately for class. Right now this thing is bricked.What I've tried:From cm

:)

 

BitLock Recovery Key Problem

Hello Anne,

Please check keys on the other Microsoft accounts configured in the machine in the past as well.

Microsoft has said they are working on it - however no guarantees that they would allow you to rescue your data. Some information MS has provided is below, but that does not apply to you.

https://docs.microsoft.com/en-us/wi...evices-might-start-up-into-bitlocker-recovery

Some devices might start up into BitLocker Recovery

[table][tr]StatusOriginating updateHistory[/tr][tr][td]Confirmed[/td][td]OS Build 22000.850KB50121702022-08-09[/td][td]Last updated: 2022-08-19, 19:36 PTOpened: 2022-08-19, 19:36 PT[/td][/tr][/table]
Some devices might enter BitLocker Recovery on the first or second restart after attempting to install Security update for Secure Boot DBX ( KB5012170), released August 9, 2022. Note: This issue only affects the Security update for Secure Boot DBX ( KB5012170) and does not affect the latest cumulative security updates, monthly rollups, or security only updates released on August 9, 2022.

Workaround: If your device is prompting for a BitLocker Recovery key, you will need to supply it to start up Windows. For more information, see Finding your BitLocker recovery key in Windows.

If you have not installed KB5012170 yet and have BitLocker enabled on your device, follow the instructions below to temporarily suspend BitLocker before installing.

If you have installed KB5012170 and have not yet restarted your device or have only restarted your device once, temporarily suspend BitLocker using the instructions below.

Important: If you have restarted your device two times or more after installing KB5012170, your device is not affected by this issue

To temporarily suspend BitLocker, or to avoid a BitLocker recovery when deploying KB5012170, follow these steps:

1. Run the following command from Administrator command prompt:

2. Install the update KB5012170, if not already installed

3. Restart the device.

4. Restart the device again.

5. BitLocker should automatically be enabled after two boots. If you want to manually resume BitLocker to verify that it is enabled, use the following command:

Next steps: We are working on a resolution and will provide an update in an upcoming release.

Affected platforms:

• ​Client: Windows 11, version 21H2
  
• ​Server: None
  

 

Bitlocker Randomly Enabled

Hi,

On my personal Lenovo laptop, Bitlocker somehow randomly was enabled. I have not enabled it, and I followed the recovery steps without luck. It seems that it was enabled during an update. I logged into my Microsoft account, see that the laptop is listed, but there is no bitlocker key listed. I am at a loss on what the next steps might be for me to be able to log into my computer at this point.

Carl

 

BitLocker won't enable on Windows 10 after update on Aug 9

Hi Brenda,

I would be happy to assist you.

Before I assist you I would like to know the information below,

• 
  Do you have a Windows 10 copy of the operating system?
  

I suggest you check whether the Bit locker is ON or OFF using the steps below.

Can you verify if BitLocker is enabled or disabled on your device? You can Enable/disable BitLocker by going to Desktop and follow these steps:

• 
  Swipe Right to Left to bring up the Charm.
  
• 
  Choose Settings.
  
• 
  Choose Control Panel.
  
• 
  Select BitLocker Drive Encryption.
  
• 
  Verify whether BitLocker is on or off on each device.
  

Also I suggest you to enable the WinRE so that you can enter the bit locker key and proceed.

When WinRE is disabled, you cannot enable BitLocker, and you receive an error message that resembles the following.

This PC doesn't support entering a BitLocker recovery password during startup. Ask your administrator to configure Windows Recovery Environment so that you can use BitLocker.

The solution would be to manually enable the windows recovery environment:

• 
  Copying the winre.wim file from c:\windows\system32\recovery\ to a folder on a recovery partition. (The partition need to have a drive letter at this point.)
  
• 
  Set the RE Image path. Example: reagentc /setreimage /path r:\recovery\windowsre
  
• 
  Enable RE with command: reagentc /enable
  
• 
  (You may remove the drive letter for the recovery partition after you have done this.)
  
• 
  Bit locker will be enabled.
  

If the issue still persists, suggest you to post your query on the below link.

https://technet.microsoft.com/en-us/library/hh831507(v=ws.11).aspx

Hope this information was helpful and do let us know if you need further assistance. We will be glad to assist.

Thank you.