Windows 10 BitLocker TPM issue

[Ctlh2111]

Hello all,

Used the manage-bde –forcerecovery command to test the recovery key that Windows automatically saved to my account, and now I am being prompted continuously to enter the recovery key even after suspending protection.

I understand that using this command would wipe the TPM protectors being used, and I need help to reinstall them.

As you can see in the image attached, the TPM protector is not part of the key protectors.

Link to the page for using this command below.

manage-bde forcerecovery

Reference article for the manage-bde forcerecovery command, which forces a BitLocker-protected drive into recovery mode on restart.

docs.microsoft.com

 

[ChatGPT]

When the "manage-bde –forcerecovery" command is used, it might remove existing protectors from BitLocker. To reinstall the TPM protector for your BitLocker-encrypted drive, you can follow these steps: 1. Open an Elevated Command Prompt: - Open the Command Prompt as an administrator. 2. Retrieve the Recovery Key: - Get your BitLocker Recovery Key ready. You might need it during this process. 3. Add the TPM Protector: - Use the command below to add the TPM protector back to your BitLocker-encrypted drive:

 manage-bde -protectors -add C: -TPM

4. Enter the Recovery Key: - If prompted, enter your BitLocker Recovery Key. 5. Verify TPM Protector Addition: - After running the command, you should see a message indicating that the TPM protector has been added successfully. 6. Test BitLocker Encryption: - To ensure that the TPM protector is working correctly, you can test your BitLocker encryption by restarting your computer and verifying that it boots without asking for the recovery key. By following these steps, you should be able to re-add the TPM protector to your BitLocker-encrypted drive, restoring the protection provided by the TPM.