Bypassing BitLocker Loop by Unlocking or Disabling or PC Reset

BitLocker recovery restores access to a BitLocker‑protected drive when the default unlock method fails. In this case, however, entering the recovery key triggers the PC to restart again, which prevents the recovery process from completing. In this guide, we shall discuss the “steps to mitigate or Bypassing BitLocker Loop by Unlocking or Disabling or PC Reset”. Please, see how to Disable the Sleep Mode: UEFI and TPM and BitLocker FAQs, how to disable Spanning-Tree Globally, and Fast Boot Options: Fix specific Drive issue with BitLocker [MBAM].

The following list highlights common events that trigger a device to enter BitLocker recovery mode during Windows startup, though these examples represent only a portion of the possible causes we’ll explore shortly.

• Entering the wrong PIN too many times
• Turning off the support for reading the USB device in the preboot environment from the BIOS or UEFI firmware if using USB-based keys instead of a TPM
• Having the CD or DVD drive before the hard drive in the BIOS boot order (common with virtual machines)
• Upgrading Windows from a CD/DVD or a mounted ISO
• Docking or undocking a portable computer
• Changes to the NTFS partition table on the disk
• Changes to the boot manager
• Turning off, disabling, deactivating, or clearing the TPM
• TPM self-test failure
• Upgrading the motherboard to a new one with a new TPM
• Hiding the TPM from the operating system
• Modifying the Platform Configuration Registers (PCRs) used by the TPM validation profile
• Moving a BitLocker-protected drive into a new computer
• On devices with TPM 1.2, changing the BIOS or firmware boot device order

Also, see Get MBAM BitLocker Recovery Keys from Microsoft SQL Server, how to fix Unable to find my BitLocker Recovery Key in AD, and Veeam Host Components: Unable to reinstall Deploy Service SSH.

Why the Battery Causes the Loop

Note: As discussed above, there are multiple potential root causes for this behavior (Hardware issues, driver or Windows update) etc. The list is endless! Unfortunately, without access to system logs/events, it is not possible to pinpoint the exact cause. Because, I already know the root cause after resolution, I have provided you the findings already. Please, follow along for a proper resolution.

Since this situation involves a BitLocker loop, BitLocker actively uses the TPM (Trusted Platform Module) to verify the integrity of the boot process. On Dell laptops, when the battery health is poor, the BIOS may fail to maintain a consistent hardware anchor. Therefore, resulting in a system restart as shown below.

Every time you enter the recovery key, the system tries to “re-seal” the TPM. However, because the battery is failing, the system often refuses to finalize this security update to prevent a power-loss “brick” during the process. This keeps the drive “untrusted” at every boot, creating the loop

Please, see “Unable to install Microsoft Bitlocker Administration: Uninstall your current version of MBAM and run setup again“, Upgrade Path and In-Place Upgrade for VBR v13 and Known Fixes, and Upgrade PowerShell Core Windows or Mac and Linux System.

Perform Some Check

Determine if TPM 2.0 Security settings show the TPM is Enabled. BitLocker relies on the TPM. Any changes to the TPM configuration in the BIOS can cause BitLocker to ask for a recovery key.

Take a look at the FAQs section for a similar error message “how to fix BitLocker always prompting for Recovery Key“. Also, see How to unlock a fixed drive protected by BitLocker.

Also, verify the pre-boot behavior for the device as shown below.

Note: The Fastboot setting is set to “Thorough”. This forces the BIOS to perform a complete hardware and configuration check at boot. Changing this from a previous setting (like “Minimal”) is a common trigger for BitLocker.

After ruling out the previous causes, we need to mitigate the issue and ensure the BitLocker recovery loop is resolved. To do this, we have a few options available.

Options to Prevent PC Restart

Unfortunately, since he device is not on, we cannot perform a remote reset of the PC via WinRM.

One possible remediation approach is to boot the device into the Windows Recovery Environment (WinRE) and attempt to start the system in Safe Mode. If Safe Mode is accessible, BitLocker protection can be temporarily suspended using the following command below. I will also show you the process to unlock and why this command option is better.

manage-bde -protectors -disable C:

Once protection is suspended, please reboot the device and check whether Windows starts normally. As the underlying cause is currently unknown.

Note: Since the logs are not possible to be reviewed, one cannot safely proceed with advanced repair actions such as repairing disk/system files or rebuilding the boot records by unlocking the drive via Advanced option and then Command Prompt. The above method is one of the cleanest way to resolve it.

Note: If recovery option or the safe Mode is not accessible or the issue persists, the recommended next step would be to perform a “Reset this PC” operation from WinRE and choose the following option “Keep my files”. Please note that the BitLocker recovery key will still be required during this process.

Please, see Failed Edge Transport: Easy Guide For Removal, how to block the Change Password Feature for All Users via the Exchange Administrative Center, and how to change your password in Outlook Web Access

Workaround for BitLocker Loop

To enter Recovery Environment, reboot and interrupt boot 3 times or click ESC and select “Skip this drive” on the BitLocker screen.

As mentioned above, to fix this issues, press ESC on your keyboard for more recovery options as shown below.

Next, click on “Skip this Drive”

Click on “Troubleshoot”

Click on command Prompt.

When launched, type the below command

manage-bde -status -C:

Please, see how to use Windows 11 PC Health Check App, how to Fix “Getting Windows Ready” Don’t turn off your computer stuck on Windows, Bang and Olufsen Bluetooth connection: How to connect and remove Beoplay E8 3rd Generation to Mac.

Unlock Drive

As you can see from the status, the drive is in a locked state.

Please, see Enable or Disable hibernation: How to fix the missing fast startup option on Windows, how to Disable modern standby on Windows 10 and 11, and How to prevent macOS from going to sleep.

Disable Protector / Disable BitLocker

Because the battery health is preventing the BIOS from “saving” the unlock state. Disabling the protectors is actually the superior choice over just unlocking, as it stops the TPM from checking the hardware integrity until you are ready to re-enable it.

If you do not intend temporarily disabling BitLocker, then you ca perform a system reset and select to keep your data.  Resetting Windows with “Keep my files” can usually preserve user data. This way, you will not loose all your data.

The “Reset this PC” option with Keep my files removes installed apps and most system settings but keeps user files in profile folders like Documents, Pictures, and Desktop on the system drive. With a BitLocker‑encrypted drive, those user files remain accessible after the reset as long as you have and can provide the BitLocker recovery key if requested

Please, see SSH and Telnet on Cisco ASA 5505: Quick Setup Guide, how to Configure OpenSSH Server: A Quick Guide, and Setup RAID 5 and 10 with MegaRAID Storage Manager on RX300 S5.

Alternative: The Command Prompt Reset

Follow the steps above to get to the recovery option to reset the PC through the Command Prompt. To do this, navigate to: Troubleshoot > Advanced Options > Command Prompt and unlock as described above with the below command command.

manage-bde -unlock C: -rp YOUR-48-DIGIT-KEY

Next, eneter the command to reset the PC

systemreset -factoryreset

Choose “Keep my files”.

Please, see why is BitLocker unable to encrypt Removable Drives via MBAM? see Why does MBAM not automatically re-encrypt MBAM or Bitlocker-protected devices, and Windows Battery Report: Track down a malfunctioning laptop battery.

How did we identify the root issue?

As part of the BitLocker recovery process, it’s recommended to determine what caused a device to enter in recovery mode. Root cause analysis might help to prevent the problem from occurring again in the future.

After resetting the PC, I ran a quick diagnostic test, and it reported that the battery is nearing the end of its service life. My recommendation is to keep the laptop plugged into AC power whenever you are performing system changes.

Since this is a hardware issue, the only permanent fix is to replace the battery. You can also run the below command  in Command Prompt to check for the “Full Charge Capacity” and “Design Capacity.

powercfg /batteryreport

This image shows a battery health warning, indicating the battery is reaching the end of its life. It is a hardware issue you should be aware of and the cause of this loop.

I hope you found this article on how to mitigate or bypassing BitLocker Loop by Unlocking or Disabling or PC Reset very useful. Please, feel free to leave a comment below.