Bitlocker TMP key release moment

Question

Hello,

When does the TPM release the BitLocker key? In the case of protection with TPM only.

Let's say my computer is turned off, with only the TPM protection. If I turn it on without entering my user session, is the VMK in my RAM?

Answer 1

Hello,

Thank you for reaching out.

That would not be possible to access the encrypted data if the appropriate encryption key was not stored in the computer’s volatile memory (RAM). While the BitLocker volume is mounted, the volume master key (VMK) resides in the computer’s RAM.

It is important to understand that a fully encrypted BitLocker volume will be automatically mounted and unlocked during the Windows boot process, long before the user signs in to the system with their Windows credentials. The TPM module will release the encryption metadata and decrypt the protected volume master key (VMK) automatically during the boot.

---

--If the reply was helpful, please don’t forget to upvote or accept as answer. --

Answer 2

Yes, it is.
It's release right before the OS starts, else, c: would not be accessible.