Microsoft’s June 9, 2026 Windows 10 cumulative update KB5094127 can trigger a one-time BitLocker recovery-key prompt on some managed PCs when BitLocker, Secure Boot, PCR7 validation, and the 2023-signed Windows Boot Manager transition collide under a specific Group Policy configuration. That is...
bitlocker recovery
group policy
group policy tpm pcr7
patchtuesdaykb5094125
secure boot
secure boot update
tpm pcr7 secure boot
windows 10
windows server 2025
