BitLocker won't suspend / boot into safe mode

Question

Hi.

I need some assistance with Windows 10, please.

1. When I suspend BitLocker it won't allow me boot into safe mode and asks for pass key / recovery key anyway.
2. When I disable BitLocker completely and and try to boot into safe mode it says access is denied at all.
3. I decrypted and re-encrypted it again and have this "whatever" key saved.

Now the question is will it allow me to boot into safe mode and "return" back from it? Can it see my new key at all?

I verified it in my command prompt like this:

manage-bde -protectors -get C:

It shows me the ID and the password (key).

However, I am worried I may not be bale to "boot and back" as there is something fishy going on. BitLocker's suspension was supposed to let me boot into safe mode in the first place.. and disabling BitLocker completely had to allow me to boot into safe mode as well..

I am afraid to make the system unbootable at all as it doesn't seem to work as excepted due to the above-mentioned points 1 and 2. Will it stick to this new key it generated during decryption and re-encryption process or is it all hopeless and the first key created ages ago and lost somewhere in time is the only key to get to the safe mode?

Would appreciate any suggestions / advices / comments at all. Many thanks in advance!

Answer 1

Hi Dennis L3,

regarding your questions, here are some advice you can try:

1. When BitLocker is suspended, booting into safe mode requires entering a recovery key. This is because BitLocker secures the boot process of the system to ensure the safety of your data. If you've forgotten your recovery key, you can follow the steps in Finding your BitLocker recovery key in Windows - Microsoft Support to find it.
2. If you completely disable BitLocker and still can't boot into Safe Mode, it may be because your system is configured with other security measures, such as Secure Boot or TPM. You can try disabling these security measures before trying to boot into safe mode.
3. If you have re-encrypted your system and saved a new recovery key, then you should be able to use it to boot into safe mode. You can use the "manage-bde -protectors -get C:" command to verify that your new key has been successfully added to the system.

Best regards,

Lei

Answer 2

Appreciate your comment, but you are totally missing the question, especially point # 3 and partially point # 2. I have already said that I had run manage-bde -protectors -get C and it showed me the pass key and ID. However, there was the old pass key set previously. When I re-run encryption will the new key work or is it hopeless and it will stick to the old key anyway and no matter what?