How to fix: Bitlocker Recovery Code WORKS, but pin does NOT - YouTube

Channel: Artexic

[0]
Hi, and welcome to this video on Bitlocker.
[3]
This video is aimed at people who are having to use the Bitlocker Recovery Code in order
[7]
to get into Windows, because Bitlocker will not accept their pin.
[12]
I made this video because I suffered with this myself recently,
[16]
and was infuriated that the front screen of Bitlocker says nothing about there being an
[21]
issue with my pin number,
[23]
and yet it will accept the Recovery Code.
[26]
I was a bit confused as to why the recovery code was acceptable, but the pin number had,
[31]
for some reason, become invalid.
[33]
So, for clarity, this video is looking at a scenario where your pin code will NOT work
[39]
for Bitlocker, but the Recovery Code DOES work.
[44]
On this basis, we have to understand Bitlocker.
[47]
You may well be aware that, for security reasons, Bitlocker is designed to be sensitive to both
[52]
hardware and configuration changes.
[54]
I HAD made a change in my UEFI (often known as your BIOS), in order to boot off a USB
[61]
stick.
[62]
It turns out that this change was enough to upset Bitlocker such that it was asking for
[68]
the Recovery Code and would no longer accept the pin number.
[71]
What I have since learned, is that Bitlocker needs manual intervention, once it has determined
[78]
that a change has been made, in order to reset its behaviour such that it will accept the
[82]
pin number again.
[84]
OK, so to fix this issue, we need to suspend the protection on Bitlocker.
[92]
I'm going to do this in Windows 8.
[95]
In Windows 7, you can simply type "manage bitlocker" into the Start menu, and it will
[99]
come up.
[100]
You can do the same in Windows 8.
[103]
Personally, I prefer to go to the "Drive Tools" within Windows Explorer, choose "Bitlocker",
[109]
and choose "Manage Bitlocker".
[111]
That will bring up the same screen: the Manage Bitlocker screen.
[116]
Within here we can see that the root drive (C drive), has got Bitlocker turned on at
[119]
the moment.
[120]
Which is why you are getting the prompt at boot time.
[123]
You are getting a number of options here.
[126]
We don't want to actually turn Bitlocker off, but temporarily we want to suspend protection,
[131]
so we're going to choose this option, which needs administration Privileges, as the shield
[134]
shows.
[135]
So I'm just going to enter administrative privileges.
[142]
OK, so having entered my administrator password, I'm being offered the chance to suspend protection,
[154]
as I've asked to do.
[157]
In-line with what I was saying earlier, this is encouraged if you are going to make changes
[162]
to the configuration or hardware itself.
[166]
So this should ideally have been done before I caused the issue on my machine.
[172]
But there we go.
[173]
So if we say "Yes" to that.
[176]
We get confirmation that Bitlocker has been suspended.
[179]
That basically means we can reboot the machine and make a configuration change, or in my
[185]
particular case (and hopefully the case if you're watching this), presumably you've already
[190]
done that change, so suspension will get Bitlocker to re-accept the pin going forward.
[197]
This first reboot will NOT require a pin, to be clear.
[201]
When you get back into Windows, if you go again to the Manage Bitlocker screen.
[206]
What you should find is that Bitlocker is then shown turned back on again.
[210]
So should turn itself back on when we get back into Windows.
[213]
So two reboots time, you should be asked for your pin, and your original pin number should
[218]
now be accepted, so you don't need the Recovery Code.
[221]
So let's just check that, and do a restart now...
[223]
OK, this is the first reboot, so no pin is required.
[238]
Windows will now load.
[239]
I'm just going to fast forward the video to the next reboot, so I'll go into Windows and
[245]
do another shutdown.
[246]
This is the system shutting down again.
[249]
This is now going to be the second reboot.
[252]
and therefore Bitlocker has now re-enabled itself, so we will now expect to be asked
[257]
for the pin number.
[260]
And this is the pin, as I previously typed, but it should now work, as we've done the
[268]
suspension of the protection.
[272]
and there we go
[273]
The system will now load into Windows, and you shouldn't again be prompted to use the
[278]
Recovery Code instead of the pin, as Bitlocker is now happy until it detects any future hardware
[285]
or configuration changes.
[287]
I hope that helped...
[288]
Thanks for watching!