Microsoft addresses BitLocker recovery issue in Windows 11

Per Bleeping Computer, Microsoft has acknowledged a problem affecting some Windows 11 systems that caused them to enter BitLocker recovery mode after installing the April 2026 security updates. BitLocker is a Windows feature designed to encrypt storage drives for data protection, and it can trigger recovery mode after hardware changes or TPM updates.

The issue, acknowledged on April 14, impacts Windows 10, Windows 11, and Windows Server devices configured with an "unrecommended" BitLocker Group Policy. Microsoft stated that affected devices would prompt users for their BitLocker recovery key upon the first restart post-update. While client platforms like Windows 10 and 11 are affected, Microsoft indicated that personal devices are unlikely to encounter this problem, as the problematic configurations are typically found on enterprise systems managed by IT departments.

A fix has been released for Windows 11 25H2 via the KB5089549 cumulative update. However, Windows 10 and Windows Server users will need to wait for future updates. Administrators are advised to remove the "Configure TPM platform validation profile for native UEFI firmware configurations" Group Policy before deploying the April 2026 updates and ensure BitLocker bindings use the PCR7 profile to mitigate the issue.

Source: Bleeping Computer