More Bit-Locker key request trigger Problems

[MikePeller]

Windows users are reporting BitLocker problems after installing last week's security update for Secure Boot.

The issues are related to KB5012170, which is designed to plug some Secure Boot holes. It's important for users running kit with Unified Extensible Firmware Interface (UEFI) firmware. "A security feature bypass vulnerability exists in secure boot," wrote Microsoft. "An attacker who successfully exploited the vulnerability might bypass secure boot and load untrusted software."

The patch adds the signatures of the known vulnerable UEFI modules to the Secure Boot Forbidden Signature Database (DBX).

Alas, it appears to do a bit more than that. Lurking in the known issues are warnings that some OEM firmware won't allow the update to be installed. The update might also fail to install with certain BitLocker Group Policy configurations or an 0x800f0922 might be thrown up.


Then there is the tripping of BitLocker recovery, which is not currently listed as a known issue.

The problem occurs on boot, and bring up the BitLocker Recovery screen into which a user is supposed to enter a key.

The depressingly familiar groundswell of grumbling has got under way as a few users have found themselves with unbootable computers unless they can provide the magic key.



https://support.microsoft.com/en-gb/top ... 2bd211bb15