In your thread title, you said the BitLocker prompt appeared after a BIOS update, but in your post, you said it happened after installing Ubuntu and restarting. Which is it? If it was a BIOS update, then the reason you're seeing the BitLocker prompt is because the BIOS update caused the TPM's "platform integrity check" to fail, which in turn causes it not to release the decryption key as normal. The platform integrity check verifies that nothing about the hardware or firmware environment has changed from a trusted state, but a BIOS update is a change, and since some changes in the hardware and firmware environment could potentially be made in order to compromise the security of the system, the TPM locks down and doesn't release the decryption key. If you have the Recovery Key, then after you enter it, the TPM will "re-seal" on the new hardware/firmware environment and operate normally going forward.
If you don't have the Recovery Key, check your Microsoft account if you linked your Windows logon account to your Microsoft account in Windows. If you don't find it there, then downgrade back to whatever BIOS version you were running before and the system should boot normally, and then back up your Recovery Key from Windows, which should always be done in the first place.
If the BitLocker prompt is occurring because you installed Linux, then I'm not sure what happened. You shouldn't be seeing the BitLocker prompt if you're trying to boot into Linux, because BitLocker isn't used for Linux partitions at all.
jphughan
9 Legend
•
14K Posts
0
May 30th, 2019 18:00
In your thread title, you said the BitLocker prompt appeared after a BIOS update, but in your post, you said it happened after installing Ubuntu and restarting. Which is it? If it was a BIOS update, then the reason you're seeing the BitLocker prompt is because the BIOS update caused the TPM's "platform integrity check" to fail, which in turn causes it not to release the decryption key as normal. The platform integrity check verifies that nothing about the hardware or firmware environment has changed from a trusted state, but a BIOS update is a change, and since some changes in the hardware and firmware environment could potentially be made in order to compromise the security of the system, the TPM locks down and doesn't release the decryption key. If you have the Recovery Key, then after you enter it, the TPM will "re-seal" on the new hardware/firmware environment and operate normally going forward.
If you don't have the Recovery Key, check your Microsoft account if you linked your Windows logon account to your Microsoft account in Windows. If you don't find it there, then downgrade back to whatever BIOS version you were running before and the system should boot normally, and then back up your Recovery Key from Windows, which should always be done in the first place.
If the BitLocker prompt is occurring because you installed Linux, then I'm not sure what happened. You shouldn't be seeing the BitLocker prompt if you're trying to boot into Linux, because BitLocker isn't used for Linux partitions at all.