Windows Encryption - Bitlocker Recovery

Scenario: When I turn on the Windows computer issued by Middlebury for my primary use, I see a "BitLocker recovery" screen. What do I do?

Personal Computer

This article is specific to computers owned and managed by Middlebury. However, personal computers may be voluntarily registered to Microsoft using Middlebury's domain. This provides the convenience of access to BitLocker keys with your Middlebury account, though is not advised if you have a personal Microsoft account to use instead. We recommend that you copy your BitLocker recovery key to a safe location for your use.

Encryption & recovery

About

BitLocker encryption protects data on hard drives from prying eyes.  Physical access to a computer without encryption enabled may allow access to private and sensitive data, including data protected by statute.  Recovery is a state sometimes encountered with computers that are encrypted.  Understanding the most common causes and solutions may help you avoid or fix such problems.  For more information, see Windows' BitLocker recovery overview. 

Recovery causes

Changes to hardware are the most common reason for a recovery screen to appear, e.g., plugging into or unplugging from a USB drive, docking station, or CD/DVD.  Running a laptop battery down while the computer is asleep may also cause the recovery screen—please allow the battery to charge to at least 30%, else you may see repeat recovery screens. 

First, make sure your laptop battery has had time to recharge. Then, try disconnecting all cords and devices from the computer (except for power) and see if the issue goes away on its own. If it does not, try the recovery key. Finally, try reconnecting any hardware that was in use when the computer last booted normally. 

Recovery keys

A BitLocker recovery key is a long string of numbers.  It may change after being accessed and used.  It should NOT be stored with a computer.  It is intended for use only in case of emergency.  

Middlebury sets up storage for recovery keys on your behalf. If your computer was prepared after February, 2020, it is likely that you can retrieve the key yourself—see User self-service key retrieval below. If you are unable to see this key yourself, you will need Helpdesk staff assistance to retrieve a recovery key for a Windows machine managed by Middlebury. Please find and supply the Middlebury/MIIS number on the sticker of the computer, then visit our physical walk-in, Zoom, or open a ticket; you will need to bring the computer if coming in person, or be in front of the computer if calling/Zoom. 

User self-service key retrieval

1. Visit go.middlebury.edu/msaccount/.

2. Select the Devices tab on the left.
   

3. Find and click on the device in the list, then click View Bitlocker Keys.
   

4. The Key ID is listed—match this to the requesting device's key ID to ensure this is the right device. 

5. Click Show recovery key to see the key.

6. Input the recovery key where requested on the device.