@Jord9857 you can't boot into Safe Mode to recover a BitLocker key. If that were possible, then an attacker could do it. Safe Mode is still booting Windows from the regular Windows partition, which is encrypted.
@YoussefChi it sounds like something happened here that caused one of two things to happen. Either a system configuration change has caused the TPM's "platform integrity check" to fail, in which case for security reasons it's refusing to release the decryption key as it normally would in case the detected change might be part of an attempt to compromise the decryption key. Or else the TPM has been cleared, in which case it doesn't have a stored key anymore at all. The only way BitLocker would silently enable would be if you chose to link your Microsoft account to your PC to use it to log onto Windows, in which case BitLocker should have uploaded a Recovery Key to whatever Microsoft account you chose. But if you don't have one there, I'm not sure how else BitLocker could have gotten enabled without your knowledge. Typically you go through a wizard and are forced to either save a Recovery Key text file on another drive or print it. But unfortunately if you don't have the Recovery Key and can't get the system back to the TPM's trusted configuration (assuming that's the problem as opposed to the TPM having been cleared), then unfortunately your data is effectively gone. The Recovery Key is the only recovery mechanism. If there were a way to access your data without the key, then the encryption would be worthless from a security standpoint.
Thank you for this information. I did link my windows with a Microsoft account and it shows that bitlocker is on only it wan't uploaded it says "You don't have any BitLocker recovery keys uploaded to your Microsoft account.". I bought my computer from a used laptop retailer and the windows was already activated. So I think that he might have the key.
Do you think there is a way to solve the infinite loop problem without having to deal with bitlocker encryption?
@YoussefChi per the PM reply I sent, you can certainly avoid the reboot loop by reinstalling Windows 10, but of course that would cause you to lose all of your data. However, if you don't have a way to access the Recovery Key or resolve whatever issue caused that prompt to appear in the first place, then your data is effectively lost already.
YoussefChi
4 Posts
0
December 9th, 2019 13:00
My computer is A Latitude 7490
Jord9857
8 Posts
0
December 11th, 2019 10:00
Hi,
Are you able to boot into safe mode to obtain your bitlocker key?
Kind Regards
Jord
YoussefChi
4 Posts
0
December 12th, 2019 18:00
I don't think so because I will need the bitlocker key to reboot into safe mode.
Is there another way to reboot into safe mode with bios for example
jphughan
9 Legend
•
14K Posts
0
December 12th, 2019 19:00
@Jord9857 you can't boot into Safe Mode to recover a BitLocker key. If that were possible, then an attacker could do it. Safe Mode is still booting Windows from the regular Windows partition, which is encrypted.
@YoussefChi it sounds like something happened here that caused one of two things to happen. Either a system configuration change has caused the TPM's "platform integrity check" to fail, in which case for security reasons it's refusing to release the decryption key as it normally would in case the detected change might be part of an attempt to compromise the decryption key. Or else the TPM has been cleared, in which case it doesn't have a stored key anymore at all. The only way BitLocker would silently enable would be if you chose to link your Microsoft account to your PC to use it to log onto Windows, in which case BitLocker should have uploaded a Recovery Key to whatever Microsoft account you chose. But if you don't have one there, I'm not sure how else BitLocker could have gotten enabled without your knowledge. Typically you go through a wizard and are forced to either save a Recovery Key text file on another drive or print it. But unfortunately if you don't have the Recovery Key and can't get the system back to the TPM's trusted configuration (assuming that's the problem as opposed to the TPM having been cleared), then unfortunately your data is effectively gone. The Recovery Key is the only recovery mechanism. If there were a way to access your data without the key, then the encryption would be worthless from a security standpoint.
YoussefChi
4 Posts
0
December 13th, 2019 06:00
Thank you for this information. I did link my windows with a Microsoft account and it shows that bitlocker is on only it wan't uploaded it says "You don't have any BitLocker recovery keys uploaded to your Microsoft account.". I bought my computer from a used laptop retailer and the windows was already activated. So I think that he might have the key.
Do you think there is a way to solve the infinite loop problem without having to deal with bitlocker encryption?
jphughan
9 Legend
•
14K Posts
0
December 13th, 2019 08:00
@YoussefChi per the PM reply I sent, you can certainly avoid the reboot loop by reinstalling Windows 10, but of course that would cause you to lose all of your data. However, if you don't have a way to access the Recovery Key or resolve whatever issue caused that prompt to appear in the first place, then your data is effectively lost already.