bitlocker+safe.mode requires manually typing of recovery key


asdffdsa

Active member
Local time
7:20 AM
Posts
5
OS
W11.22H1.64BIT_10.0.22000.1335
hello, thanks, first timer. hope i posted in the correct forum area.
W11.22H1.64BIT_10.0.22000.1335

problem: booting into safe.mode, windows should use the usb key,
not demand to manually type in super long recovery key.

my laptop is protected by hardware bitlocker using samsung evo970.

normally, upon boot, a usb key, with the .bek file, is required.
and that works fine.

tho, i was shocked, when booting into safe mode, windows demands that i manually type the recovery key.
for some reason, in that case, windows not seeing/using the usb key.

before i spin-up a vm and try to replicate, perhaps, hopefully, someone has a suggestion?

thanks,
david
 

My Computer

System One

  • OS
    W11.22H1.64BIT_10.0.22000.1335
    Computer type
    Laptop
    Manufacturer/Model
    LENOVO THINKPAD T580
    CPU
    Intel(R) Core(TM) i5-8350U CPU @ 1.70GHz
It is up to you but whenever I suspect a problem or I do not want to have to sign into Bitlocker, I use the Bitllocker commands.
You can use RebootCount up to 15 if needed, as when you perform a complete OS upgrade where you have many reboots.
However when it is a simple fix that only needs 1 reboot you can use that instead.
BitLocker

Disable
Elev Cmd Prmpt

Manage-bde –Protectors –Disable C: -RebootCount 15

--------------------

Resuming
Elev Cmd Prmpt

Manage-bde –Protectors -Enable C:
 

My Computer

System One

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    HP/Envy-17T
    CPU
    Intel Core i7 @ 1.80GHz
    Motherboard
    HP - 8485 (U3E1)
    Memory
    16gb
    Graphics Card(s)
    Intel UHD Graphics 620 and NVIDIA GeForce MX150
    Sound Card
    Realtek High Definition Audio / Intel Display Audio / NVIDIA Virtual Audio Device (Wave Extensible) (WDM)
    Monitor(s) Displays
    Generic PnP Monitor on Intel UHD Graphics 620
    Screen Resolution
    1536x864 pixels
    Hard Drives
    KBG30ZMV256G TOSHIBA (SSD)
    ST1000LM049-2GH172 (SSD)
    PSU
    HP Standard
    Cooling
    HP CoolSense
    Keyboard
    Standard PS/2 Keyboard
    Mouse
    Anker
    Internet Speed
    95Mbps
    Browser
    FireFox
    Antivirus
    WebRoot
@Dav, thanks that worked
 

My Computer

System One

  • OS
    W11.22H1.64BIT_10.0.22000.1335
    Computer type
    Laptop
    Manufacturer/Model
    LENOVO THINKPAD T580
    CPU
    Intel(R) Core(TM) i5-8350U CPU @ 1.70GHz
You can suspend BitLocker and it won't ask for a key when going into Safe Mode. At least that's how it worked just now as I tested it. I have two drives using BitLocker - OS, and backup drive. When I suspended the OS drive, and went into Safe Mode, it never asked for the BitLocker key.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 24H2 (Build 26100.3476)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Intel Core 9 Ultra
    Motherboard
    Gigabyte Aorus Z890 Xtreme AI Top
    Memory
    64G (4x16) DDR5 Corsair RGB Dominator Platinum (6400Mhz)
    Graphics Card(s)
    Radeon (XFX MERC 310) RX 7900XT
    Sound Card
    Onboard (ESS Sabre HiFi using Realtek drivers)
    Monitor(s) Displays
    27-inch Eizo Color Edge - CG2700X
    Screen Resolution
    3840 x 2160
    Hard Drives
    4 Samsung NVM 990 Pro drives: 1 X 1TB (OS) 2X TB, 1 X 1TB.
    PSU
    Seasonic TX-1300 (1300 Watts)
    Case
    Cooler Master H500M
    Cooling
    Corsair Link Titan 280 RX RGB
    Keyboard
    Logitech Craft
    Mouse
    Logitech MX Master 3
    Internet Speed
    1TB Download. 512mb Upload
    Browser
    Microsoft Edge Chromium
    Antivirus
    Windows Security
    Other Info
    System used for gaming, photography, music, school.
  • Operating System
    Windows 11 Pro 23H2 (Build 22631.4391)
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo ThinkPad X1 Carbon (Gen 12)
    CPU
    Intel Core Ultra 7 165U vPro® Processor
    Motherboard
    Vendor
    Memory
    32 GB LPDDR5X-6400MHz (Soldered)
    Graphics card(s)
    Intel Graphics
    Sound Card
    Onboard
    Monitor(s) Displays
    14" 2.8K OLED, Anti Reflection, Touch, HDR 500, 400 nits, 120Hz
    Screen Resolution
    2880 x 1800
    Hard Drives
    1 TB SSD M.2 2280 PCIe Gen4 Performance TLC Opal
    PSU
    Vendor
    Case
    Lenovo
    Cooling
    Vapor Chamber Cooling
    Mouse
    Touchpad: Haptic Touchpad
    Keyboard
    Backlit, Black with Fingerprint Reader and WWAN
    Internet Speed
    100MB
    Browser
    Edge Chromium
    Antivirus
    Windows Security
    Other Info
    202. Build Your Own laptop.
    vPro Certified Model: vPro Enterprise
@Dav offered a good workaround, not a solution to my primary issue.

never should have to disable protection when entering into safe mode.
simply, that safe mode should use the .bek on the usb key, and not require the manual typing of that super long recovery key.
same as when i boot normally.
 

My Computer

System One

  • OS
    W11.22H1.64BIT_10.0.22000.1335
    Computer type
    Laptop
    Manufacturer/Model
    LENOVO THINKPAD T580
    CPU
    Intel(R) Core(TM) i5-8350U CPU @ 1.70GHz
@Dav offered a good workaround, not a solution to my primary issue.
I simply offered a different way to go about things.

never should have to disable protection when entering into safe mode.
Then you miss the point of BitLocker protection as its job is to protect data. How is it to know who's entering the PC into safe mode? You actually should be glad it's doing this as you know it can't be bypassed that way.

Peace :cool:
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 24H2 (Build 26100.3476)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Intel Core 9 Ultra
    Motherboard
    Gigabyte Aorus Z890 Xtreme AI Top
    Memory
    64G (4x16) DDR5 Corsair RGB Dominator Platinum (6400Mhz)
    Graphics Card(s)
    Radeon (XFX MERC 310) RX 7900XT
    Sound Card
    Onboard (ESS Sabre HiFi using Realtek drivers)
    Monitor(s) Displays
    27-inch Eizo Color Edge - CG2700X
    Screen Resolution
    3840 x 2160
    Hard Drives
    4 Samsung NVM 990 Pro drives: 1 X 1TB (OS) 2X TB, 1 X 1TB.
    PSU
    Seasonic TX-1300 (1300 Watts)
    Case
    Cooler Master H500M
    Cooling
    Corsair Link Titan 280 RX RGB
    Keyboard
    Logitech Craft
    Mouse
    Logitech MX Master 3
    Internet Speed
    1TB Download. 512mb Upload
    Browser
    Microsoft Edge Chromium
    Antivirus
    Windows Security
    Other Info
    System used for gaming, photography, music, school.
  • Operating System
    Windows 11 Pro 23H2 (Build 22631.4391)
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo ThinkPad X1 Carbon (Gen 12)
    CPU
    Intel Core Ultra 7 165U vPro® Processor
    Motherboard
    Vendor
    Memory
    32 GB LPDDR5X-6400MHz (Soldered)
    Graphics card(s)
    Intel Graphics
    Sound Card
    Onboard
    Monitor(s) Displays
    14" 2.8K OLED, Anti Reflection, Touch, HDR 500, 400 nits, 120Hz
    Screen Resolution
    2880 x 1800
    Hard Drives
    1 TB SSD M.2 2280 PCIe Gen4 Performance TLC Opal
    PSU
    Vendor
    Case
    Lenovo
    Cooling
    Vapor Chamber Cooling
    Mouse
    Touchpad: Haptic Touchpad
    Keyboard
    Backlit, Black with Fingerprint Reader and WWAN
    Internet Speed
    100MB
    Browser
    Edge Chromium
    Antivirus
    Windows Security
    Other Info
    202. Build Your Own laptop.
    vPro Certified Model: vPro Enterprise
if anyone has a solution to this, i would be grateful.

the issue remains the same: how to get safe mode to find the usb key.
--- in `normal` boot mode, windows will use the .bek on the usb key.
--- in `safe mode`, windows will NOT use the .bek on the usb key.
 

My Computer

System One

  • OS
    W11.22H1.64BIT_10.0.22000.1335
    Computer type
    Laptop
    Manufacturer/Model
    LENOVO THINKPAD T580
    CPU
    Intel(R) Core(TM) i5-8350U CPU @ 1.70GHz

Latest Support Threads

Back
Top Bottom