Troubleshooting guide
How to fix the problem
BIOS or changing the boot environment may cause the BitLocker recovery key to be requested. This is encryption protection, not self-deletion of files. A disk specific 48-digit key that matches the key ID displayed on the screen is required.
Possible solutions
Choose the method that matches your situation. Start with the simplest suitable option and check the result. If the problem is fixed, you do not need to continue with the other methods.
Finding and entering a key
Use another trusted device.
Steps to follow
- Write down the key ID on the recovery screen. Do not make the entire key or screen with personal data public.
- On another device, sign in to your Microsoft account's official recovery keys page via Microsoft's instructions.
- Select the key from the list by ID, not just the computer name, and enter its 48 digits on the recovery screen.
- If it's a work or school computer, contact your organization's administrator with the key ID.
Verification of other legitimate copies of the key
Suitable if the key does not appear in the first account.
Steps to follow
- Check which Microsoft account was used when you first set up your computer; the key may have been saved by whoever set it up.
- Search your backup media for a text file or printout of the BitLocker key. Don't upload the key file to obscure "recovery" sites.
- If BIOS is strange in the service, ask him about the changes made without changing random TPM settings yourself.
- After restoring access, keep an additional copy of the key and a backup copy of the data. If the request is repeated, correct the cause separately.
If the problem persists
If you can't find the key, don't wipe the TPM or format the drive if you need data. Legal places to look for keys are your Microsoft account, an organization administrator, a saved file, or a fingerprint. Password and PIN do not replace this key.
Request a repair