Summary A BitLocker recovery key is needed when BitLocker can’t automatically unlock an encrypted drive in Windows. This is a 48‑digit number that lets you regain access to your drive. You might be prompted for the BitLocker recovery key during startup, due to a security risk or hardware change:

A BitLocker recovery key is needed when BitLocker can’t automatically unlock an encrypted drive in Windows. This key, which is a 48-digit number, is used to regain access to the drive. You might be prompted for the BitLocker recovery key during startup, due to a security risk or hardware change:

Can I set up Surface turns on but is stuck on the recovery? How do I reset Surface using a usb recovery drive? How should I check the configuration? If your Surface turns on and you see a Recovery screen for the Boot Configuration Data or BCD file, do the following steps. These steps work for all Windows devices.

Overview This page guides administrators and support professionals in diagnosing and resolving Secure Boot–related issues on Windows devices. Topics include Secure Boot certificate update failures, incorrect Secure Boot states, unexpected BitLocker recovery prompts, and boot failures following Secure Boot configuration changes.

Provides advanced steps to fix the BitLocker recovery key prompt issue that occurs after you install the August 2018 UEFI update on the 13-inch Surface Book 2 13" device.

How does BitLocker work in Windows? How do I back up my BitLocker recovery key? What is BitLocker in Windows? BitLocker is a Windows security feature that protects your data by encrypting your drives. This encryption ensures that if someone tries to access a disk offline, they won’t be able to read any of its content.

Startup Repair is a built-in Windows recovery tool that helps fix issues preventing the operating system from starting. It runs from the Windows Recovery Environment (WinRE) and automatically diagnoses and repairs common startup problems such as corrupted system files or boot configuration errors.

If you see a Surface screen with a red bar and a lock at the top, you may need to turn Secure Boot on. This article tells you how to do that.

Open BitLocker Drive Encryption Next to each drive there's a list of allowed operations. To enable encryption, select the option Turn on BitLocker Select an unlock option and back up the recovery key The drive will begin the encryption process. This can take some time to complete, but you can continue to use your device while it progresses

This article describes how to modify the Windows startup behavior, and the available options. Change startup settings Note If you’ve encrypted your device, you’ll need your BitLocker key to complete this task. If you don’t know your BitLocker key, see Find your BitLocker recovery key.