Windows 10: When Booting into Safe Mode - Does the Bitlocker recovery key ever change?

I can't find anything that specifies if this key ever changes on a machine if its not reimaged. Looking into how we can backup Bitlocker operations/keys in case of major SCCM/MECM server issues.The reason I ask is in the situation where you need to access a drive and delete or change something to recovery windows from a bad patch or corrupt file.

:)

 

Issues with entering recovery key for safe mode

Hello,

Apology for the delay in response.

What is the make and model of your device?

Did you tried using function keys(F1-F10) to enter BitLocker recovery key?

Did you tried using some other external keyboard?

Suggest you to disable the Bit locker Drive Encryption to see if it helps. You can follow the below mentioned steps and check if it helps

To turn off BitLocker Drive Encryption:

• 
  Click Start, type Manage BitLocker and select same from the list.
  
• 
  Under BitLocker Drive Encryption, find the drive on which you want BitLocker Drive Encryption turned off(I.e. In this case you system drive), and click
  Turn Off BitLocker.
  
• 
  A message is displayed, informing you that the drive will be decrypted and that decryption may take some time. Click
  Decrypt the drive to continue and turn off BitLocker on the drive.
  

Once done, try to check if you're able to boot into Safe Mode successfully.

Keep us posted for any concerns with windows, we're glad to assist you.

 

BitLocker won't suspend / boot into safe mode

Hi Dennis L3,

regarding your questions, here are some advice you can try:



1. When BitLocker is suspended, booting into safe mode requires entering a recovery key. This is because BitLocker secures the boot process of the system to ensure the safety of your data. If you've forgotten your recovery key, you can follow the steps in Finding your BitLocker recovery key in Windows - Microsoft Support to find it.



2. If you completely disable BitLocker and still can't boot into Safe Mode, it may be because your system is configured with other security measures, such as Secure Boot or TPM. You can try disabling these security measures before trying to boot into safe mode.



3. If you have re-encrypted your system and saved a new recovery key, then you should be able to use it to boot into safe mode. You can use the "manage-bde -protectors -get C:" command to verify that your new key has been successfully added to the system.

Best regards,

Lei

 

BitLocker won't suspend / boot into safe mode

Hi.



I need some assistance with Windows 10, please.



1. When I suspend BitLocker it won't allow me boot into safe mode and asks for pass key / recovery key anyway.

2. When I disable BitLocker completely and and try to boot into safe mode it says access is denied at all.

3. I decrypted and re-encrypted it again and have this "whatever" key saved.



Now the question is will it allow me to boot into safe mode and "return" back from it? Can it see my new key at all?



I verified it in my command prompt like this:



manage-bde -protectors -get C:



It shows me the ID and the password (key).



However, I am worried I may not be bale to "boot and back" as there is something fishy going on. BitLocker's suspension was supposed to let me boot into safe mode in the first place.. and disabling BitLocker completely had to allow me to boot into safe mode as well..



I am afraid to make the system unbootable at all as it doesn't seem to work as excepted due to the above-mentioned points 1 and 2. Will it stick to this new key it generated during decryption and re-encryption process or is it all hopeless and the first key created ages ago and lost somewhere in time is the only key to get to the safe mode?



Would appreciate any suggestions / advices / comments at all. Many thanks in advance!