Microsoft Fixes BitLocker Recovery Issue Affecting Windows Server 2025

Summary
Microsoft fixed an issue that could send some Windows Server 2025 and Windows 11 23H2 devices to BitLocker recovery after the April 2026 update. Admins can install the fixes or apply recommended mitigations.
Key points
- The issue could trigger a BitLocker recovery prompt after installing the April 2026 security update.
- It affected some Windows Server 2025 and Windows 11 23H2 systems with specific TPM validation and PCR7 configurations.
- Microsoft addressed the issue in updates KB5094125 for Windows Server 2025 and KB5093998 for Windows 11 23H2.
- Admins unable to install the fixes can remove the affected Group Policy configuration or apply a Known Issue Rollback.
- Microsoft said affected devices may show Event ID 1032 when installing Windows updates.
Article Details
- Event Type
- Microsoft software update fixes a BitLocker recovery issue triggered by the April 2026 security update.
- Impact
- On affected Windows Server 2025 devices and some Windows 11 23H2 systems with specific TPM validation and PCR7 configurations, the first restart after the update could prompt users to enter the BitLocker recovery key. Microsoft resolved the issue in KB5094125 for Windows Server 2025 and KB5093998 for Windows 11 23H2. Administrators unable to deploy those updates were advised to adjust the Group Policy configuration or apply a Known Issue Rollback.
Vendors
Products
BitLockerMicrosoft has fixed a known issue that could cause some Windows Server 2025 devices and a subset of Windows 11 systems to boot into BitLocker recovery after installing the April 2026 security update.Windows 11Microsoft has fixed a known issue that could cause some Windows Server 2025 devices and a subset of Windows 11 systems to boot into BitLocker recovery after installing the April 2026 security update.Windows Server 2025Microsoft has fixed a known issue that could cause some Windows Server 2025 devices and a subset of Windows 11 systems to boot into BitLocker recovery after installing the April 2026 security update.
