Symptoms
BitLocker prompts to enter the recovery key when booting up a computer using a USB type-C or Thunderbolt 3 docking station.
This article is intended for the following models:
- Latitude 5280
- Latitude 5480
- Latitude 5580
- Latitude 7280
- Latitude 7380
- Latitude 7480
- Precision 3520
Note: Other Dell computers may have the same behavior, the following fix is intended for the models that are listed above.
Cause
No cause information.
Resolution
Table of Contents
- BitLocker Asks for a Recovery Key at Boot
- How to Set the BIOS to Prevent BitLocker Recovery Key Prompts
BitLocker Asks for a Recovery Key at Boot
Note: Update your computer's BIOS before proceeding, as some BIOS updates have implemented a fix for this issue. You can check for the updated version on the Dell Drivers & Downloads site.
BitLocker is an encryption function of the Windows Operating System 9OS). You may encounter an issue where BitLocker asks for a recovery key every time you boot up your computer. This issue has been found to occur on computers with USB Type-C and Thunderbolt 3 (TBT) ports.
BitLocker monitors the computer for changes to the boot configuration. When BitLocker sees a new device in the boot list or an attached external storage device, it prompts you for the key for security reasons. This is normal behavior.
This problem occurs because boot support for USB-C/TBT and Preboot for TBT are set to On by default. Turning these options off in the BIOS removes any USB-C/TBT devices from the boot list, and BitLocker does not see them.
The only negative effect of this configuration change is that you cannot perform a PXE boot from a USB-C/TBT dongle or docking station.
How to Set the BIOS to Prevent BitLocker Recovery Key Prompts
To resolve the issue, follow the steps below:
- Enter the BIOS (pressF2 or F12 at the boot screen.)
- Go to System Configuration, then USB Configuration, and make the following changes:
Note: Depending on the computer type, these options may be in other locations.
- Disable USB Type-C or Thunderbolt 3 Boot support.
- Disable USB Type-C or Thunderbolt 3 (and PCIe behind TBT) Pre-boot.
- Disable UEFI Network Stack.
- Set: POST Behavior -> Fastboot -> Thorough
Once these changes are made, the computer should not prompt for the BitLocker key on every boot.
Back to Top
Additional Information
How to Check Your Activation Status in Windows 10
Duration: 01:07 (hh:mm:ss)
When available, closed caption (subtitles) language settings can be chosen using the Settings or CC icon on this video player.
Recommended Articles
Here are some recommended articles related to this topic that might be of interest to you.
Dell Dock WD15, Dell Thunderbolt Dock TB16, Dell Precision Dual USB-C Thunderbolt Dock - TB18DC, Latitude 5280/5288, Latitude 7280, Latitude 7380, Latitude 5480/5488, Latitude 7480, Latitude 5580, Precision 3520
FAQs
BitLocker monitors the computer for changes to the boot configuration. When BitLocker sees a new device in the boot list or an attached external storage device, it prompts you for the key for security reasons. This is normal behavior.
Why is BitLocker asking for a recovery key every time? ›
Whenever you connect a drive to your PC and it is detected in the boot list, BitLocker will ask for the recovery key. If you're not connecting any devices and it keeps asking for the recovery key, it is because the boot support for Preboot for TBT and USB-C/TBT is turned on by default.
Why do I have so many BitLocker recovery keys? ›
For multiple recovery key, based on my research, it may caused that the bitlocker process is interrupted in between either due to machine level issues like with TPM, or with the end user actions, the process starts again causing the service to generate multiple keys.
Why does my Dell XPS keep asking for the BitLocker recovery key? ›
BitLocker causes this message by retaining the hardware key of the original motherboard, and the mismatch prompts for the Recovery Key. This is a result of not suspending or disabling BitLocker before the hardware change.
What happens if you skip BitLocker recovery key? ›
Rod-IT: If you could bypass Bitlocker in some way, that would be a huge security risk. Devices are encrypted to keep unauthorized people out, if that so happens to be yourself because you've forgotten or no longer have the key - then the encryption has done it's job and kept people out.
How do I turn off BitLocker recovery key? ›
Press Windows Start button. Type bitlocker. Click Manage BitLocker to enter the BitLocker Drive Encryption menu. Select Turn off BitLocker to proceed with decryption.
What causes BitLocker recovery prompts? ›
BitLocker Recovery Mode can occur for many reasons, including: Authentication errors: Forgetting the PIN. Entering incorrect PIN too many times (activating the anti-hammering logic of the TPM)
How to fix BitLocker recovery? ›
The easiest way to bypass the BitLocker recovery screen is to enter the correct recovery key. Most users save their recovery keys in their USB drives. Thus, we also suggest you check your USB drive and check whether you can bypass the screen. If you can't find the BitLocker recovery key, contact your administrator.
How do I disable BitLocker in BIOS? ›
No, you cannot disable BitLocker from the BIOS. BitLocker is a disk encryption feature provided by Microsoft Windows, and it operates at the operating system level, not the BIOS level. To disable BitLocker, you need to boot into Windows and use the BitLocker management tools provided by the operating system.
How do I get out of BitLocker recovery loop? ›
How to bypass BitLocker recovery screen on startup?
- Method 1: Suspend BitLocker protection and resume it.
- Method 2: Remove the protectors from the boot drive.
- Method 3: Enable the secure boot.
- Method 4: Update your BIOS.
- Method 5: Disable the secure boot.
- Method 6: Use legacy boot.
Related Topics. If you experiences that the computer shows BitLocker recovery screen after power on, it means that the HDD/SDD has been encrypted. (HDD/SDD is locked.) Once PC hardware components have been replaced or BIOS settings have been changed, all may cause system shows BitLocker recovery screen after power on.
How often does BitLocker recovery key change? ›
Q: Is the BitLocker recovery key always the same? The BitLocker recovery key is created when a file system is BitLocker encrypted. Providing the file system is not re-formatted or BitLocker is turned off, the key remains the same. If you reapply BitLocker a new recovery key will be created.
Why is my laptop asking for BitLocker recovery key every time? ›
Update Windows OS. If you haven't updated your Windows for a while now, we urge you to do so. Because you're running an outdated version, it could be possible that this is why Bitlocker keeps asking for a recovery key.
How to unlock BitLocker without recovery key? ›
If you do not have the BitLocker password and recovery key, you need to format the encrypted drive to remove the encryption or turn to third-party tools, such as Passware Kit, Elcomsoft Forensic Disk Decryptor, or Elcomsoft Distributed Password Recovery. EaseUS will provide detailed guides on how.
How do I get past BitLocker recovery on Windows 10 Dell? ›
Suspend, then resume BitLocker and restart your system. This updates BitLocker's record of your system. Avoid being prompted for your recovery key by suspending BitLocker before making major changes, and resuming when you're done.
What would cause BitLocker to enter recovery mode? ›
BitLocker recovery scenarios
- Entering the wrong PIN too many times.
- Turning off the support for reading the USB device in the preboot environment from the BIOS or UEFI firmware if using USB-based keys instead of a TPM.
- Having the CD or DVD drive before the hard drive in the BIOS boot order (common with virtual machines)
If you experiences that the computer shows BitLocker recovery screen after power on, it means that the HDD/SDD has been encrypted. (HDD/SDD is locked.) Once PC hardware components have been replaced or BIOS settings have been changed, all may cause system shows BitLocker recovery screen after power on.
Should I disable BitLocker for dual boot? ›
Based on my research, to dual boot Windows (with BitLocker enabled) and Linux, you need to disable BitLocker encryption before starting the dual boot process and re-enable it after installing Linux, or it will fail the dual boot.
