BitLocker Asks for a Recovery Key Every Boot on USB-C or Thunderbolt Computers When Docked or Undocked

BitLocker prompts to enter the recovery key when booting up a computer using a USB type-C or Thunderbolt 3 docking station.

This article is intended for the following models:

• Latitude 5280
• Latitude 5480
• Latitude 5580
• Latitude 7280
• Latitude 7380
• Latitude 7480
• Precision 3520

No cause information.

Table of Contents

1. BitLocker Asks for a Recovery Key at Boot
2. How to Set the BIOS to Prevent BitLocker Recovery Key Prompts

BitLocker Asks for a Recovery Key at Boot

BitLocker is an encryption function of the Windows Operating System 9OS). You may encounter an issue where BitLocker asks for a recovery key every time you boot up your computer. This issue has been found to occur on computers with USB Type-C and Thunderbolt 3 (TBT) ports.

BitLocker monitors the computer for changes to the boot configuration. When BitLocker sees a new device in the boot list or an attached external storage device, it prompts you for the key for security reasons. This is normal behavior.

This problem occurs because boot support for USB-C/TBT and Preboot for TBT are set to On by default. Turning these options off in the BIOS removes any USB-C/TBT devices from the boot list, and BitLocker does not see them.

The only negative effect of this configuration change is that you cannot perform a PXE boot from a USB-C/TBT dongle or docking station.

How to Set the BIOS to Prevent BitLocker Recovery Key Prompts

To resolve the issue, follow the steps below:

1. Enter the BIOS (pressF2 or F12 at the boot screen.)
2. Go to System Configuration, then USB Configuration, and make the following changes:
   Note: Depending on the computer type, these options may be in other locations.
    
   1. Disable USB Type-C or Thunderbolt 3 Boot support.
   2. Disable USB Type-C or Thunderbolt 3 (and PCIe behind TBT) Pre-boot.
   3. Disable UEFI Network Stack.
   4. Set: POST Behavior -> Fastboot -> Thorough

Once these changes are made, the computer should not prompt for the BitLocker key on every boot.

Back to Top

Recommended Articles

Here are some recommended articles related to this topic that might be of interest to you.

• BitLocker fails to turn on or prompts for the Recovery Key rebooting with Windows 10, UEFI, and the TPM 1.2 Firmware
• BitLocker is Prompting for a Recovery Key, and You Cannot Locate the Key
• How to unlock BitLocker when it stops accepting recovery keys
• BitLocker prompting for recovery key after Motherboard Replacement