bitlocker+safe.mode requires manually typing of recovery key


asdffdsa

New member
Local time
8:49 PM
Posts
5
OS
W11.22H1.64BIT_10.0.22000.1335
hello, thanks, first timer. hope i posted in the correct forum area.
W11.22H1.64BIT_10.0.22000.1335

problem: booting into safe.mode, windows should use the usb key,
not demand to manually type in super long recovery key.

my laptop is protected by hardware bitlocker using samsung evo970.

normally, upon boot, a usb key, with the .bek file, is required.
and that works fine.

tho, i was shocked, when booting into safe mode, windows demands that i manually type the recovery key.
for some reason, in that case, windows not seeing/using the usb key.

before i spin-up a vm and try to replicate, perhaps, hopefully, someone has a suggestion?

thanks,
david
 

My Computer

System One

  • OS
    W11.22H1.64BIT_10.0.22000.1335
    Computer type
    Laptop
    Manufacturer/Model
    LENOVO THINKPAD T580
    CPU
    Intel(R) Core(TM) i5-8350U CPU @ 1.70GHz
It is up to you but whenever I suspect a problem or I do not want to have to sign into Bitlocker, I use the Bitllocker commands.
You can use RebootCount up to 15 if needed, as when you perform a complete OS upgrade where you have many reboots.
However when it is a simple fix that only needs 1 reboot you can use that instead.
BitLocker

Disable
Elev Cmd Prmpt

Manage-bde –Protectors –Disable C: -RebootCount 15

--------------------

Resuming
Elev Cmd Prmpt

Manage-bde –Protectors -Enable C:
 

My Computer

System One

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    HP/Envy-17T
    CPU
    Intel Core i7 @ 1.80GHz
    Motherboard
    HP - 8485 (U3E1)
    Memory
    16gb
    Graphics Card(s)
    Intel UHD Graphics 620 and NVIDIA GeForce MX150
    Sound Card
    Realtek High Definition Audio / Intel Display Audio / NVIDIA Virtual Audio Device (Wave Extensible) (WDM)
    Monitor(s) Displays
    Generic PnP Monitor on Intel UHD Graphics 620
    Screen Resolution
    1536x864 pixels
    Hard Drives
    KBG30ZMV256G TOSHIBA (SSD)
    ST1000LM049-2GH172 (SSD)
    PSU
    HP Standard
    Cooling
    HP CoolSense
    Keyboard
    Standard PS/2 Keyboard
    Mouse
    Anker
    Internet Speed
    95Mbps
    Browser
    FireFox
    Antivirus
    WebRoot
@Dav, thanks that worked
 

My Computer

System One

  • OS
    W11.22H1.64BIT_10.0.22000.1335
    Computer type
    Laptop
    Manufacturer/Model
    LENOVO THINKPAD T580
    CPU
    Intel(R) Core(TM) i5-8350U CPU @ 1.70GHz
You can suspend BitLocker and it won't ask for a key when going into Safe Mode. At least that's how it worked just now as I tested it. I have two drives using BitLocker - OS, and backup drive. When I suspended the OS drive, and went into Safe Mode, it never asked for the BitLocker key.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 23H2 (Build 22631.3296)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Intel i9-9900K
    Motherboard
    Gigabyte Aorus Z390 Xtreme
    Memory
    32G (4x8) DDR4 Corsair RGB Dominator Platinum (3600Mhz)
    Graphics Card(s)
    Radeon VII
    Sound Card
    Onboard (ESS Sabre HiFi using Realtek drivers)
    Monitor(s) Displays
    NEC PA242w (24 inch)
    Screen Resolution
    1920 x 1200
    Hard Drives
    5 Samsung SSD drives: 2X 970 NVME (512 & 1TB), 3X EVO SATA (2X 2TB, 1X 1TB)
    PSU
    EVGA Super Nova I000 G2 (1000 watt)
    Case
    Cooler Master H500M
    Cooling
    Corsair H115i RGB Platinum
    Keyboard
    Logitech Craft
    Mouse
    Logitech MX Master 3
    Internet Speed
    500mb Download. 11mb Upload
    Browser
    Microsoft Edge Chromium
    Antivirus
    Windows Security
    Other Info
    System used for gaming, photography, music, school.
  • Operating System
    Win 10 Pro 22H2 (build 19045.2130)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom Built
    CPU
    Intel i7-7700K
    Motherboard
    Gigabyte GA-Z270X-GAMING 8
    Memory
    32G (4x8) DDR4 Corsair Dominator Platinum (3333Mhz)
    Graphics card(s)
    AMD Radeon R9 Fury
    Sound Card
    Onboard (Creative Sound Blaster certified ZxRi)
    Monitor(s) Displays
    Dell U2415 (24 inch)
    Screen Resolution
    1920 x 1200
    Hard Drives
    3 Samsung SSD drives: 1x 512gig 950 NVMe drive (OS drive), 1 x 512gig 850 Pro, 1x 256gig 840 Pro.
    PSU
    EVGA Super Nova 1000 P2 (1000 watt)
    Case
    Phantek Enthoo Luxe
    Cooling
    Corsair H100i
    Mouse
    Logitech MX Master
    Keyboard
    Logitech MK 710
    Internet Speed
    100MB
    Browser
    Edge Chromium
    Antivirus
    Windows Security
    Other Info
    This is my backup system.
@Dav offered a good workaround, not a solution to my primary issue.

never should have to disable protection when entering into safe mode.
simply, that safe mode should use the .bek on the usb key, and not require the manual typing of that super long recovery key.
same as when i boot normally.
 

My Computer

System One

  • OS
    W11.22H1.64BIT_10.0.22000.1335
    Computer type
    Laptop
    Manufacturer/Model
    LENOVO THINKPAD T580
    CPU
    Intel(R) Core(TM) i5-8350U CPU @ 1.70GHz
@Dav offered a good workaround, not a solution to my primary issue.
I simply offered a different way to go about things.

never should have to disable protection when entering into safe mode.
Then you miss the point of BitLocker protection as its job is to protect data. How is it to know who's entering the PC into safe mode? You actually should be glad it's doing this as you know it can't be bypassed that way.

Peace :cool:
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 23H2 (Build 22631.3296)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Intel i9-9900K
    Motherboard
    Gigabyte Aorus Z390 Xtreme
    Memory
    32G (4x8) DDR4 Corsair RGB Dominator Platinum (3600Mhz)
    Graphics Card(s)
    Radeon VII
    Sound Card
    Onboard (ESS Sabre HiFi using Realtek drivers)
    Monitor(s) Displays
    NEC PA242w (24 inch)
    Screen Resolution
    1920 x 1200
    Hard Drives
    5 Samsung SSD drives: 2X 970 NVME (512 & 1TB), 3X EVO SATA (2X 2TB, 1X 1TB)
    PSU
    EVGA Super Nova I000 G2 (1000 watt)
    Case
    Cooler Master H500M
    Cooling
    Corsair H115i RGB Platinum
    Keyboard
    Logitech Craft
    Mouse
    Logitech MX Master 3
    Internet Speed
    500mb Download. 11mb Upload
    Browser
    Microsoft Edge Chromium
    Antivirus
    Windows Security
    Other Info
    System used for gaming, photography, music, school.
  • Operating System
    Win 10 Pro 22H2 (build 19045.2130)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom Built
    CPU
    Intel i7-7700K
    Motherboard
    Gigabyte GA-Z270X-GAMING 8
    Memory
    32G (4x8) DDR4 Corsair Dominator Platinum (3333Mhz)
    Graphics card(s)
    AMD Radeon R9 Fury
    Sound Card
    Onboard (Creative Sound Blaster certified ZxRi)
    Monitor(s) Displays
    Dell U2415 (24 inch)
    Screen Resolution
    1920 x 1200
    Hard Drives
    3 Samsung SSD drives: 1x 512gig 950 NVMe drive (OS drive), 1 x 512gig 850 Pro, 1x 256gig 840 Pro.
    PSU
    EVGA Super Nova 1000 P2 (1000 watt)
    Case
    Phantek Enthoo Luxe
    Cooling
    Corsair H100i
    Mouse
    Logitech MX Master
    Keyboard
    Logitech MK 710
    Internet Speed
    100MB
    Browser
    Edge Chromium
    Antivirus
    Windows Security
    Other Info
    This is my backup system.
if anyone has a solution to this, i would be grateful.

the issue remains the same: how to get safe mode to find the usb key.
--- in `normal` boot mode, windows will use the .bek on the usb key.
--- in `safe mode`, windows will NOT use the .bek on the usb key.
 

My Computer

System One

  • OS
    W11.22H1.64BIT_10.0.22000.1335
    Computer type
    Laptop
    Manufacturer/Model
    LENOVO THINKPAD T580
    CPU
    Intel(R) Core(TM) i5-8350U CPU @ 1.70GHz
Back
Top Bottom