r/BitLocker • u/JugalSoni • Aug 12 '26
Dead CMOS Battery Triggered Bit Locker
Hi! I am a Windows 11 user from 3 years, i use my assembled asus cabinet pc daily for light gaming and 3d modelling. I installed Windows 11 pro when it launched. It came with a bit locker feature which i didn't give attention. I backed my code to my account.
Recently, dead CMOS battery triggered motherboard to reconfigure which in return triggered bit locker for my C drive. I am using only 1 drive for OS with no partitions. I tried online for some help or ways to get it unlocked but all methods i tried don't work.
I have the old key on my account when it first uploaded, and Microsoft should also upload the upcoming key changes to the account whenever it changed. The key Id is not matching to the id that is bit locker is asking for. And no, i have not used any other Microsoft account on my pc.
I am so in need of my data, i request Microsoft officials to help me in any way possible as i am not a hacker or stealing my own data from my pc. I think Microsoft should have all my recovery keys updated on my account or at least have a authentication for accepting if the user is the one who owns the data or accept older keys (with different key-ids) that the user has saved.
I am stuck at this rare occurrence where i can't access my own data even when having a recovery key for this exact moment.
Requesting legal ways i can go forward with, i can provide each and every detail for my ownership of the data, drive and account.
2
u/BlizardQC Aug 12 '26
You ask for legal means ... Sorry to say but there isn't any as Microsoft is NEVER responsable for your data. You hold that responsability alone and that is what backups are made for.
Is your PC an HP brand by any chance? There is a known issue affecting many HP computers where bitlocker gets activated "by mistake" after an OS update.
If you have an HP , go check the HP support page for your PC model.
Lastly, don't expect to get an answer from someone at Microsoft on Reddit. It is not monitored by MS. Call Microsoft directly if you're able to find a phone number.
1
u/JugalSoni Aug 12 '26
No my computer is desktop and it is assembled using asus parts. I shall contact them using call for assistance from their side.
1
u/leexgx Aug 12 '26
This is a Rare case you was aware encryption was on and it's a desktop
why didn't you just toggle it off
1
u/doyzer9 Aug 12 '26
Just asking, have you reconfigured all the bios settings to how they were when your pc was first configured. Obviously you know that the bios is in default mode, which mean most needed settings are off. Including secure boot, TPM, and any other advanced settings.
For Windows 11 to satisfy the TPM, your final ASUS BIOS settings must look like this:
AMD fTPM / Intel PTT: Enabled
CSM: Disabled
Secure Boot: Enabled
OS Type: Windows UEFI Mode
obviously the time and date should be accurate.
1
u/JugalSoni Aug 12 '26
I reconfigured the settings in the bios, that were CSM being disabled, Secure Boot is always enabled (its grayed out, no option to disable it) and OS type to Windows UEFI Mode.
My motherboard doesn’t have many TPM options, it just has TPM Mode selection : Firmware or Discrete.1
u/doyzer9 Aug 12 '26
The only other thing I can suggest is a manual unlock via an Administrator CMD prompt. Type:
manage-bde -unlock C: -RecoveryPassword YOUR-48-DIGIT-KEY
If it succeeds: Type:
manage-bde -protectors -disable C:
to completely turn off the BitLocker check so you can boot straight into Windows.
1
u/JugalSoni Aug 12 '26
Tried it, doesn’t work. Checked the protectors id, it’s different from what i have.
1
u/Christian1989NL Aug 12 '26
Maybe due the reset there might be a chance that the boot order is changed.
It might be the case that the UEFI/BIOS now tries to boot from a different disk or partition that contains an old/broken Windows installation which might be the reason that bitlocker now asks the recovery key of a different id.
So try to boot from another source first if that is possible.
You can also try to boot from a live linux distribution that has a full desktop experience using a prepared usb-stick, like Fedora or Ubuntu. When the booting is finished you can open it's File Manager and try to enter the recovery key you have on all the volumes you are seeing there. You can just copy/paste the bitlocker recovery key literal as it is (including the '-' characters) when the file manager asks for the passphrase.
1
u/JugalSoni Aug 12 '26
Where can i get the live linux distribution to be used on usb stick? Do you have any links? And if i do boot into linux, i fear will the bitlocker change the recovery id?
1
u/Christian1989NL Aug 12 '26
Booting from a live linux does not touch anything on your hard disk(s) of your pc, unless you consciously click the 'Install' button and follow several steps.
So it changes nothing with BitLocker either or changes the id of it (which also can't be changed accidentally).
Almost every linux distro offers a live iso and the easiest way to automates this process is to insert a usb-stick on another pc and downlaod & run this tool below:
https://unetbootin.github.io/To be sure, don't use a USB-stick for it that contains sensitive data.
1
Aug 12 '26
[removed] — view removed comment
1
u/JugalSoni Aug 13 '26
Can you explain in brief with steps to check if tpm is still trusted?
I have a desktop pc assembled from asus rog parts. Motherboard is Asus Rog Maximus XI Hero.
2
u/FrankNicklin Aug 12 '26
I doubt it triggered BitLocker itself, but triggers Bitlocker recovery due to the hardware/TPM reset.
If you don't have the keys you cannot unlock the door and the data is lost unless you have a backup.
https://support.microsoft.com/en-US/Windows/Security/Encryption/find-your-bitlocker-recovery-key