Several Windows devices are asking for recovery keys after the June cumulative update. Secure Boot certificate updates are already enabled, and suspending BitLocker during installation has not prevented every issue. What are you checking or changing?
Anyone else seeing BitLocker recovery prompts after the June update?
Answers
Check that the Secure Boot certificate update policy is actually enabled on the affected devices, not just assigned. One report saw fewer recovery problems after enabling the policy, but it did not eliminate them. Pilot changes across different device models before expanding the rollout.
Reply to this answer
Iโd pause or slow the update rollout while you sort out the pattern. First make sure recovery keys are available, then compare affected and unaffected devices for update status, Secure Boot certificate state, and firmware version. Suspending BitLocker may be worth testing, but it clearly isnโt a guaranteed fix.
Reply to this answer
Hardware differences may matter here. Reports described different outcomes across device types, and newer firmware seemed less troublesome in one case, though older or customized systems were not tested. Iโd keep those machines in a separate pilot rather than assuming one setting will behave the same everywhere.
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions