6 Posts
3
18370
August 17th, 2021 11:00
XPS 13 Bitlocked after Bios update yesterday
My laptop xps13 got a BIos software update by Dell yesterday. On restart my laptop was Bitlocked. I desperately need to get my laptop up and running again. Please help
No Events found!



jphughan
9 Legend
•
14K Posts
0
August 17th, 2021 12:00
@Wolraad Newer versions of Dell Update default to suspending BitLocker when you choose to install a BIOS update, specifically to avoid this situation. Maybe you're running an outdated version or unchecked that option? In any case, what's happening here is that normally, the TPM releases the decryption key for BitLocker -- but it will only do that after a successful "platform integrity check" that verifies that certain hardware and firmware aspects of the environment have not changed since the trusted state that the key was "sealed" against, since some changes could be part of an attempt to compromise the key when the TPM releases it. On some systems, a BIOS version change counts as a change that breaks that platform integrity check. At that point, the TPM won't release the key, and you're prompted for the Recovery Key instead. If you enter it, the TPM re-seals to the new state. (Alternatively, if BitLocker is suspended at the time of the change that normally would cause the platform integrity check to fail, then the TPM reseals against the new state automatically and you don't have to deal with a Recovery Key prompt.)
So ideally you'd have the key backed up somewhere, possibly in the cloud under some Microsoft account you've used with that laptop. If you can't find that, then the only other way to solve this would be to use the BIOS update utility built into the firmware to revert to whatever BIOS version you were previously running, which will return the system to its trusted state and allow the TPM to release the key -- assuming you haven't gone ahead and cleared the TPM to try to troubleshoot this, in which case the key will be gone. To use the built-in BIOS update utility, press F12 during startup and choose "BIOS Flash Utility" in the one-time boot menu. That will take you to an interface where you can specify a flash drive that contains a BIOS update EXE file. You can find those files on the Dell Support site. Enter your model or Service Tag, go to the Downloads section, and search BIOS. Click the appropriate search result and select "View older versions". If you don't remember which version you were running before, you'll have to try a few. But download those EXEs and put them on the flash drive to use with the utility.
And whenever you get out of the woods, back up your BitLocker Recovery Key. There are times you will need it and won't have another option like this, such as after a motherboard replacement where you'll have a new TPM that won't have the decryption key anymore. That is another situation that has caught several people out.
fireberd
9 Legend
•
33.4K Posts
0
August 17th, 2021 11:00
Please clarify "Bitlocked". Do you mean the BIOS is corrupted?
Here is the link to Dell instructions for a Corrupted BIOS recovery
How to Recover the BIOS on a Dell Computer or Tablet | Dell US
Wolraad
6 Posts
1
August 17th, 2021 12:00
I am not the only person. I Googled the topic. It seems many people have this problem after a Dell update
Wolraad
6 Posts
1
August 17th, 2021 12:00
The computer now asks for a bitlock key to unlock the laptop. I never activated bitlock. The Dell software upgrade must have activated the Bitlock
Wolraad
6 Posts
0
August 17th, 2021 13:00
Thank you so much. I will most definitely try this and give you feedback
XPS_Man
5 Practitioner
•
2.4K Posts
0
August 17th, 2021 23:00
Yes BIOS updates/Hardware Changes/ External devices can cause Bit Locker to Trigger.
I hope you know which MSA was being used for Signing in to the machine.
If yes
Please visit
https://account.microsoft.com/devices/recoverykey?refd=onedrive.live.com
Use same Microsoft account as you are using on problematic computer and you should be able to see your Bit Locker Key (48 all numbers)
If you don't know your MSA, Bad news is Data is gone.
As a last resource you can try resetting BIOS to default . Which may or may not work.
fireberd
9 Legend
•
33.4K Posts
1
August 18th, 2021 03:00
Here is the fix from another Dell user from 2018
Solved: BitLocker: need a key but I never installed it - Dell Community
Wolraad
6 Posts
0
August 18th, 2021 06:00
Hello Jphughan. Man you make my day, my month, my year. I thought my life came to an end when I could not access my laptop. Your professionalism and eloquence and detailed description was so well done. I want to thank you profusely. If you ever come to Cape Town, South Africa please look me up. It will be an honour to thank you in person.
May the Universe bless you abundantly and exponentially.
Kind regards
Werner
jphughan
9 Legend
•
14K Posts
1
August 18th, 2021 07:00
@Wolraad Glad to hear you're ok again, and thanks for the kind words! But given that you had such a close call, I have some recommendations for you:
Good luck!
Wolraad
6 Posts
0
August 21st, 2021 09:00
My apologies for not responding earlier. With my laptop being out of action things wrre in a bit of disarray. Thanx for your effort in responding.
Be blessed
Kind regards
ar18
1 Message
0
August 22nd, 2021 07:00
Here is what worked for me (pasted from MS community support):
"It takes me to https://myaccount.microsoft.com/ which is a landing page I've yet to see. On the left hand bar I see devices, third option down. Click on that, AND THERE IS THE EFFING COMPUTER!!!!! I click "View BitLocker keys" and it shows the BitLocker ID of the "bricked" computer, I click "Show Recovery Key" and thar she blows. On the "bricked" laptop I type this in and bingo, we are doing a full reset. I'm doing a full full reset because it's brand new, and I definitely want to make sure that I'm not carrying over a user id and password. Hope this helps."
I have an xps 9360 and experienced the exact same issue. I had never used bitlocker, nor heard of it before yesterday. The above link worked for me to locate the bitlocker key.
kwood1138
6 Posts
0
August 22nd, 2021 15:00
Hey @jphughan , I have been trying to use the Dell bios flash update utility (the "F12" menu) to load the previous BIOS version (2.15.1), but for me when I start the flash update process, the first thing the machine does is reboot and then display the bitlocker recovery key prompt again. It never starts the flashing process. Is there an additional step to take? I have tried setting up a Windows PE USB boot stick and running the bios EXE from there, but same deal. I also tried following Dell's steps for creating a DOS boot drive, but from there running the bios EXE gave me a message that it could not be run in DOS (even though the description says that it can be run from any Windows or DOS environment).
To be clear: my wife's XPS 13 9360 received the 2.16 bios update. When it completed, on next boot she is presented with the bitlocker recovery key prompt. She has no recovery key saved in her MSA/OneDrive and we don't have any record of saving it somewhere silly like the local drive or printing it out and losing it somewhere. I have the bitlocker recovery keys for all the other machines in the house saved to my microsoft account. I would not have thought bitlocker was enabled on this laptop.
jphughan
9 Legend
•
14K Posts
0
August 22nd, 2021 16:00
@kwood1138 Sorry you’re having trouble. When I’ve used that utility, I just format the flash drive as FAT32 and then copy the EXE for the desired BIOS release to the drive. Are you using FAT32? Have you tried another flash drive? I’ve encountered occasional problems with high capacity flash drives (above 32 GB), although that’s admittedly when trying to boot from them rather than trying to read a file from them within a flash utility. If you’re already using FAT32 with the correct EXE as the only file present, and you’ve tried another flash drive, then unfortunately I’m not immediately sure what to suggest next. Sorry!
jphughan
9 Legend
•
14K Posts
0
August 22nd, 2021 16:00
@kwood1138 The only other idea I had was to ask if the flash drive connected directly to the system, i.e. not through any sort of hub or adapter? If so, then I don't have any other suggestions right now. I've never encountered that behavior or seen it discussed around here.
kwood1138
6 Posts
0
August 22nd, 2021 16:00
@jphughan Yep, connected right into the side of the laptop. Oh well. Thanks anyway!