Clean installed Windows 11 with Secure Boot and TPM active, no recovery key in Microsoft account

Hello.

I have been running the preview version of Windows 11 until the release yesterday.
Decided to clean install. Downloaded the Windows 11 ISO using the Media Creation Tool and before installing Windows 11 verified if Secure Boot and TPM was enabled. And it was.

After installing Windows 11 I went to check on the link: Sign in to your Microsoft account is the recovery key was created on my account (as I logged in the Windows 11 installation screen).
To my suprise only my Lenovo laptop security key is available but not for this main PC.

Did I do something wrong or is it normal that the recovery key is not available? If I now CMOS the BIOS or upgrade the BIOS it could happen that the keys are reset and I don't have a recovery key to re-enable Secure Boot.

Thanks!

João

The recovery key is for bitlocker. Is your disk encrypted? Neither Secure Boot nor TPM will encrypt the disk.

Ah ok, I was mixing Bitlocker and Secure Boot. All should be OK then.

NavyLCDR said:

The recovery key is for bitlocker. Is your disk encrypted? Neither Secure Boot nor TPM will encrypt the disk.

Click to expand...

Didn't know that either. Thx.

What happens in case I do a BIOS upgrade, though? Or want to buy a new system? (Like Alderlake-based) Will I be able to boot with my current SSD containing Win 11? If yes (I hope so) then what was the point of secure boot to begin with?

A bit of noob questions, I realize. I just don't want to wake up one day, with, say, a broken computer and no way any more to access my boot SSD.