bitlocker+safe.mode requires manually typing of recovery key


asdffdsa

Active member
Local time
7:12 PM
Posts
5
OS
W11.22H1.64BIT_10.0.22000.1335
hello, thanks, first timer. hope i posted in the correct forum area.
W11.22H1.64BIT_10.0.22000.1335

problem: booting into safe.mode, windows should use the usb key,
not demand to manually type in super long recovery key.

my laptop is protected by hardware bitlocker using samsung evo970.

normally, upon boot, a usb key, with the .bek file, is required.
and that works fine.

tho, i was shocked, when booting into safe mode, windows demands that i manually type the recovery key.
for some reason, in that case, windows not seeing/using the usb key.

before i spin-up a vm and try to replicate, perhaps, hopefully, someone has a suggestion?

thanks,
david
 

My Computer My Computer

At a glance

W11.22H1.64BIT_10.0.22000.1335Intel(R) Core(TM) i5-8350U CPU @ 1.70GHz
OS
W11.22H1.64BIT_10.0.22000.1335
Computer type
Laptop
Manufacturer/Model
LENOVO THINKPAD T580
CPU
Intel(R) Core(TM) i5-8350U CPU @ 1.70GHz
It is up to you but whenever I suspect a problem or I do not want to have to sign into Bitlocker, I use the Bitllocker commands.
You can use RebootCount up to 15 if needed, as when you perform a complete OS upgrade where you have many reboots.
However when it is a simple fix that only needs 1 reboot you can use that instead.
BitLocker

Disable
Elev Cmd Prmpt

Manage-bde –Protectors –Disable C: -RebootCount 15

--------------------

Resuming
Elev Cmd Prmpt

Manage-bde –Protectors -Enable C:
 

My Computer My Computer

At a glance

Windows 11 ProIntel Core i7 @ 1.80GHz16gbIntel UHD Graphics 620 and NVIDIA GeForce MX150
OS
Windows 11 Pro
Computer type
Laptop
Manufacturer/Model
HP/Envy-17T
CPU
Intel Core i7 @ 1.80GHz
Motherboard
HP - 8485 (U3E1)
Memory
16gb
Graphics Card(s)
Intel UHD Graphics 620 and NVIDIA GeForce MX150
Sound Card
Realtek High Definition Audio / Intel Display Audio / NVIDIA Virtual Audio Device (Wave Extensible) (WDM)
Monitor(s) Displays
Generic PnP Monitor on Intel UHD Graphics 620
Screen Resolution
1536x864 pixels
Hard Drives
KBG30ZMV256G TOSHIBA (SSD)
ST1000LM049-2GH172 (SSD)
PSU
HP Standard
Cooling
HP CoolSense
Keyboard
Standard PS/2 Keyboard
Mouse
Anker
Internet Speed
95Mbps
Browser
FireFox
Antivirus
WebRoot
@Dav, thanks that worked
 

My Computer My Computer

At a glance

W11.22H1.64BIT_10.0.22000.1335Intel(R) Core(TM) i5-8350U CPU @ 1.70GHz
OS
W11.22H1.64BIT_10.0.22000.1335
Computer type
Laptop
Manufacturer/Model
LENOVO THINKPAD T580
CPU
Intel(R) Core(TM) i5-8350U CPU @ 1.70GHz
You can suspend BitLocker and it won't ask for a key when going into Safe Mode. At least that's how it worked just now as I tested it. I have two drives using BitLocker - OS, and backup drive. When I suspended the OS drive, and went into Safe Mode, it never asked for the BitLocker key.
 

My Computers My Computers

  • At a glance

    Windows 11 Pro 24H2 (Build 26100.4770)Intel Core 9 Ultra 285K64G (4x16) DDR5 Corsair RGB Dominator Platinu...Radeon (XFX Mercury) RX 9070XT OC (with Magne...
    OS
    Windows 11 Pro 24H2 (Build 26100.4770)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Intel Core 9 Ultra 285K
    Motherboard
    Gigabyte Aorus Z890 Xtreme AI Top
    Memory
    64G (4x16) DDR5 Corsair RGB Dominator Platinum (6400Mhz)
    Graphics Card(s)
    Radeon (XFX Mercury) RX 9070XT OC (with Magnetic Fans)
    Sound Card
    Onboard (DTS:X® Ultra Audio: ESS ES9280A DAC)
    Monitor(s) Displays
    27-inch Eizo Color Edge - CG2700X
    Screen Resolution
    3840 x 2160
    Hard Drives
    4 Samsung NVM 990 Pro drives: 1TB (OS), 2TB, 2 X 4TB.
    PSU
    Seasonic TX-1300 (1300 Watts)
    Case
    Cooler Master H500M
    Cooling
    Corsair Link Titan 280 RX RGB
    Keyboard
    Logitech Craft
    Mouse
    Logitech MX Master 3S
    Internet Speed
    1TB Download. 512mb Upload
    Browser
    Microsoft Edge Chromium
    Antivirus
    Windows Security
    Other Info
    System used for gaming, photography, music, school.
  • At a glance

    Windows 11 Pro 24H2 (Build 26100.4061)Intel Core i9-9900K32gig (4 x 8) Corsair Dominator Platinum DDR4...Radeon XFX Merc 7900XT (20gig)
    Operating System
    Windows 11 Pro 24H2 (Build 26100.4061)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Intel Core i9-9900K
    Motherboard
    Gigabyte Z390 Aorus Xtreme
    Memory
    32gig (4 x 8) Corsair Dominator Platinum DDR4 3600Mhz (B-Die)
    Graphics card(s)
    Radeon XFX Merc 7900XT (20gig)
    Sound Card
    Onboard
    Monitor(s) Displays
    24-Inch NEC PA242W
    Screen Resolution
    2880 x 1800
    Hard Drives
    2 X NVME, 1 X SATA SSD
    PSU
    EVGA Super Nova 1000 P2 (1000 Watt)
    Case
    Phantek Enthoo Luxe
    Cooling
    Corsair H115i Elite AIO Cooler
    Keyboard
    Logitech Keys
    Mouse
    Logitech MX Master 3
    Internet Speed
    1TB Download. 512mb Upload
    Browser
    Microsoft Edge Chromium
    Antivirus
    Windows Security
    Other Info
    Backup System
@Dav offered a good workaround, not a solution to my primary issue.

never should have to disable protection when entering into safe mode.
simply, that safe mode should use the .bek on the usb key, and not require the manual typing of that super long recovery key.
same as when i boot normally.
 

My Computer My Computer

At a glance

W11.22H1.64BIT_10.0.22000.1335Intel(R) Core(TM) i5-8350U CPU @ 1.70GHz
OS
W11.22H1.64BIT_10.0.22000.1335
Computer type
Laptop
Manufacturer/Model
LENOVO THINKPAD T580
CPU
Intel(R) Core(TM) i5-8350U CPU @ 1.70GHz
@Dav offered a good workaround, not a solution to my primary issue.
I simply offered a different way to go about things.

never should have to disable protection when entering into safe mode.
Then you miss the point of BitLocker protection as its job is to protect data. How is it to know who's entering the PC into safe mode? You actually should be glad it's doing this as you know it can't be bypassed that way.

Peace :cool:
 

My Computers My Computers

  • At a glance

    Windows 11 Pro 24H2 (Build 26100.4770)Intel Core 9 Ultra 285K64G (4x16) DDR5 Corsair RGB Dominator Platinu...Radeon (XFX Mercury) RX 9070XT OC (with Magne...
    OS
    Windows 11 Pro 24H2 (Build 26100.4770)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Intel Core 9 Ultra 285K
    Motherboard
    Gigabyte Aorus Z890 Xtreme AI Top
    Memory
    64G (4x16) DDR5 Corsair RGB Dominator Platinum (6400Mhz)
    Graphics Card(s)
    Radeon (XFX Mercury) RX 9070XT OC (with Magnetic Fans)
    Sound Card
    Onboard (DTS:X® Ultra Audio: ESS ES9280A DAC)
    Monitor(s) Displays
    27-inch Eizo Color Edge - CG2700X
    Screen Resolution
    3840 x 2160
    Hard Drives
    4 Samsung NVM 990 Pro drives: 1TB (OS), 2TB, 2 X 4TB.
    PSU
    Seasonic TX-1300 (1300 Watts)
    Case
    Cooler Master H500M
    Cooling
    Corsair Link Titan 280 RX RGB
    Keyboard
    Logitech Craft
    Mouse
    Logitech MX Master 3S
    Internet Speed
    1TB Download. 512mb Upload
    Browser
    Microsoft Edge Chromium
    Antivirus
    Windows Security
    Other Info
    System used for gaming, photography, music, school.
  • At a glance

    Windows 11 Pro 24H2 (Build 26100.4061)Intel Core i9-9900K32gig (4 x 8) Corsair Dominator Platinum DDR4...Radeon XFX Merc 7900XT (20gig)
    Operating System
    Windows 11 Pro 24H2 (Build 26100.4061)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Intel Core i9-9900K
    Motherboard
    Gigabyte Z390 Aorus Xtreme
    Memory
    32gig (4 x 8) Corsair Dominator Platinum DDR4 3600Mhz (B-Die)
    Graphics card(s)
    Radeon XFX Merc 7900XT (20gig)
    Sound Card
    Onboard
    Monitor(s) Displays
    24-Inch NEC PA242W
    Screen Resolution
    2880 x 1800
    Hard Drives
    2 X NVME, 1 X SATA SSD
    PSU
    EVGA Super Nova 1000 P2 (1000 Watt)
    Case
    Phantek Enthoo Luxe
    Cooling
    Corsair H115i Elite AIO Cooler
    Keyboard
    Logitech Keys
    Mouse
    Logitech MX Master 3
    Internet Speed
    1TB Download. 512mb Upload
    Browser
    Microsoft Edge Chromium
    Antivirus
    Windows Security
    Other Info
    Backup System
if anyone has a solution to this, i would be grateful.

the issue remains the same: how to get safe mode to find the usb key.
--- in `normal` boot mode, windows will use the .bek on the usb key.
--- in `safe mode`, windows will NOT use the .bek on the usb key.
 

My Computer My Computer

At a glance

W11.22H1.64BIT_10.0.22000.1335Intel(R) Core(TM) i5-8350U CPU @ 1.70GHz
OS
W11.22H1.64BIT_10.0.22000.1335
Computer type
Laptop
Manufacturer/Model
LENOVO THINKPAD T580
CPU
Intel(R) Core(TM) i5-8350U CPU @ 1.70GHz
Back
Top Bottom