cyber.hendryadrian.com
Security News · bleepingcomputer.com

Microsoft fixes BitLocker recovery issue on Windows 11 25H2

· Original article ↗

Summary

Microsoft fixed a BitLocker recovery issue on Windows 11 25H2 with KB5089549. Windows 10 and Windows Server still await a fix; admins are advised to adjust TPM validation Group Policy settings before deploying the April 2026 updates.

Key points

  • Some devices prompted for a BitLocker recovery key after installing the April 2026 security updates.
  • The issue affected systems with certain TPM validation settings, including invalid PCR7 configurations.
  • Microsoft addressed the issue for Windows 11 25H2 in update KB5089549.
  • Windows 10 and Windows Server still need a future update for a permanent fix.
  • Microsoft advised admins to remove the specified TPM platform validation Group Policy configuration before deploying the April updates and ensure BitLocker bindings use the PCR7 profile.

Article Details

Event Type
Microsoft fixed a BitLocker recovery issue on Windows 11 25H2 with the KB5089549 update.
Impact
After installing the April 2026 security update, some devices with certain TPM validation and BitLocker Group Policy settings could enter BitLocker recovery and require a recovery key, potentially interrupting access to protected drives. Windows 10 and Windows Server systems remain affected pending a future fix.

Vendors

MicrosoftMicrosoft has fixed a BitLocker recovery issue affecting some Windows 11 25H2 devices after the April 2026 security updates, while Windows 10 and Windows Server systems still need a future patch.

Products

BitLockerMicrosoft has fixed a BitLocker recovery issue affecting some Windows 11 25H2 devices after the April 2026 security updates, while Windows 10 and Windows Server systems still need a future patch.Windows 10Microsoft has fixed a BitLocker recovery issue affecting some Windows 11 25H2 devices after the April 2026 security updates, while Windows 10 and Windows Server systems still need a future patch.Windows 11Microsoft has fixed a BitLocker recovery issue affecting some Windows 11 25H2 devices after the April 2026 security updates, while Windows 10 and Windows Server systems still need a future patch.Windows ServerMicrosoft has fixed a BitLocker recovery issue affecting some Windows 11 25H2 devices after the April 2026 security updates, while Windows 10 and Windows Server systems still need a future patch.

Related Articles