After installing an affected update and restarting, some devices running Windows 10, Version 1703, Windows 10, version 1607 or Windows Server 2016 with Hyper-V enabled may enter BitLocker recovery mode and receive an error, "0xC0210000".

Learn about BitLocker Drive Encryption in Windows and how to encrypt drives.

When you try to run the BitLocker Drive Encryption program, you receive the following error message in a BitLocker Drive Encryption Error dialog box: Cannot run. The path specified in the Boot Configuration Data (BCD) for a BitLocker Drive Encryption integrity-protected application is incorrect.

Follow these steps to remedy the vulnerability: Suspend BitLocker protection: Run “manage-bde -protectors <OS volume letter:> –disable” as an administrator of the computer. Clear the TPM. For instructions, see "6. Clear TPM” under Recommended Actions" in Microsoft Security Advisory ADV170012.

Learn about BitLocker Device Encryption in Windows and how to enable it.

Fix it for me To fix this problem automatically, click the Fix it button or link. Then click Run in the File Download dialog box, and follow the steps in the Fix it wizard. Notes This wizard may be in English only. However, the automatic fix also works for other language versions of Windows.

Learn about BitLocker recovery keys and how to back them up.

Learn how to find your BitLocker recovery key in Windows.

Provides advanced steps to fix the BitLocker recovery key prompt issue that occurs after you install the August 2018 UEFI update on the 13-inch Surface Book 2 13" device.

It scans your computer for the problem and then tries to fix it so your computer can start correctly. This tool is particularly useful when your computer is experiencing issues such as missing or damaged system files, corrupted boot configuration data, or other startup-related problems.