Can't delete bitlocker recovery keys from microsoft account

Behdad 126

Hi,

I have been using my microsoft account for several years to store my bitlocker keys everytime I encrypt my C: and D: drives.
As part of the process every time I do the new encryption I first go to my microsoft account and delete the old keys.

However, suddenly today, I was not able to delete them. When I click and check the checkbox that I already have a copy of the keys and
click continue the dialog just sits there with the waiting feedback loop and never comes back. I looked in the browser console, it seems that
I get a 403/forbidden response back.

I have tried different browsers, clearing cache, logging out and in even tried it from my mobile and I still have the same problem.

Any Ideas as to why this happens? I appreciate your thoughts.

Thank you.

EDIT: 17/Jul/2022 : As of today, the issue is fixed for me. I managed to delete the old keys. I also saved my current keys and deleted them again successfully and have no further problems with this. Thanks Microsoft.

Kane S 156 Reputation points

2022-06-02T05:14:57.783+00:00

I'm having exactly the same issue, I've re-enabled Bitlocker on both my C and D Drives. When I go to my account to remove the old keys, nothing. It's just spinning with "Deleting this recovery key now..." I've tried from both Microsoft Edge, and Google Chrome, on two different computers, one with Windows 10, and the other with Windows 11.

Thanks in advance.
Behdad 126 Reputation points

2022-06-02T06:37:52.36+00:00

Thanks for your reply. Hopefully someone from MS will have some solution for us.
Kacyk-9417 6 Reputation points

2022-06-17T07:38:31.787+00:00

Same here. Nothing is deleting. It is a little more than annoying situation.

Flagship functionality and right now we have spinning dots...

Edit:

One more thing. After few days (during I tried to get some help from Microsoft to delete old keyes by them through https://widget.rave.office.net/chat?partner=SMC2&requestid= and THEY FAILED ** to give me any clue or hint what to do - except some really ridicules things from the script that could not work - because the problem is on their end, on their servers! ) I decided to make some tests on my own and had made encrypted system partition with option to save recovery key to my Microsoft account (https://account.microsoft.com/devices/recoverykey?refd=account.microsoft.com).
Then I had entered that website with backuped Bitlocker recovery keyes, to try one more time to delete that old unneeded anymore recovery keyes - still - can't do that.
**But more disturbing thing - ** like red flashing warning light** - is that already NEW FRESH RECOVERY KEY IS VISIBLE WITH -> **INVALID DATE !!!** Also - unable to delete that NEW ONE!
It like some part of the backup data of the recovery key is already corrupted! And it is done entirely in some weird way BY MICROSOFT SOFTWARE -> BITLOCKER and the way they store it (?) on their servers?!
Right now we can't relay on the security and validity of the backup information regarding Biltocker recovery keyes. THIS IS SERIOUS!
Patrick Armstrong 41 Reputation points

2022-06-20T17:02:21.103+00:00

Oh boy. Gheez. I just got off a support chat with tech support. I am shocked at the response I received...

The rep said, "Thank you for that information, Patrick. I just checked with our Microsoft Software engineers and I was able to get helpful data from them. Our Microsoft Accounts is currently having system upgrades to ensure a better user experience which affects the Bitlocker Recovery Key that cannot be deleted. Rest assured that our tech and engineering team are working hand in hand to get this done within the day. In the meantime, we need to make sure that the Bitlocker is turned off on your computer to make sure that you will not be prompt by it just in case you do majer changes on your computer. I'm truly sorry for the inconvenience that this may have caused you today, Patirck. Hoping for your kind consideration and understanding on this."

Um, pay attention there.
Turn off bitlocker on your computers
You might have to enter your bitlocker keys
WHAT???

I'm sure the rep must have been mis-speaking and I told them so. How major upgrades to the microsoft account system will negatively impact my personal computer experience.

Good luck everyone, let's hope we all get through this upgrade process unscathed.
Kacyk-9417 6 Reputation points

2022-06-20T18:16:15.01+00:00

Can't help myself...

One more time -> "Have You Tried Turning It Off And On Again?" ;)
Sakhr Al-Hendawi 1 Reputation point

2022-06-21T17:08:50.72+00:00

Might sound stupid, but where can you access support chat? I’ve been searching everywhere it only leads to the ‘Search Help’
Kacyk-9417 6 Reputation points

2022-06-21T18:19:38.527+00:00

You could try there -> https://support.microsoft.com/en-us/home/contact?SourceApp=smc2&ContactUsExperienceEntryPointAssetId=
Іван Пазенко 1 Reputation point

2022-06-29T03:36:27.47+00:00

Jun 28nd - still not working. Keys can’t be added and deleted
Guy Dye 1 Reputation point

2022-07-02T17:55:02.397+00:00

I'm glad I found this thread. And I'm extremely uncomfortable that the issue is still a thing after more than a week. If we were talking about anything other than BitLocker encryption keys, I wouldn't be as concerned. But, uh...mismanagement of BitLocker keys could be the difference between a working computer and a useless $2000 brick. So, what gives? Why is this so hard?
Cy 'kkm' K'Nelson 16 Reputation points

2022-07-08T22:42:07.85+00:00

Hi 244, if you don't mind my asking, are you positively certain that the keys cannot be added too? Another comment down below says they can. That makes a difference.
Cy 'kkm' K'Nelson 16 Reputation points

2022-07-08T23:09:28.273+00:00
I would save the recovery key on a USB stick or the numeric password into a password manager in addition to Account if I were you. I in fact do both. If you do not want unencrypted recovery material to ever be on an unencrypted USB storage, you can see the numeric password using elevated command line and copy it from there:

C:\> manage-bde -protectors -get C: . . . . Numerical password: ID: {1234CDEF-xxxx-xxxx-xxxx-xxxxxxxxxxxxx} Password: NNNNNN-....-NNNNNN

The first 8 of the ID, 1234CDEF in this example, is the same number as the Key ID on the Account website, and NNNNNN-....-NNNNNN is the 48-digit unlock password. Copy both from console into your password manager secure note or something, repeat for every encrypted drive letter, and then close command prompt window.

A recovery key is saved to USB stick as a hidden system file with the .BEK extension (the above command will display its name as "External key"). Use 'X:\> attrib -H -S *.BEK' in a command prompt on the USB drive (X: here) root to make them visible if you want. You can have as many saved on the same drive, they have GUID names, and Windows will pick the one it needs to decrypt a drive (the key protector GUID is stored unencrypted). The numeric password is saved as a normal text file.

For an ultimate security, a keypad-secured USB stick from a reputable vendor goes a long way. Whether you need one is your call based on the value of the BitLocker-encrypted data to the malicious party.
Patrick Armstrong 41 Reputation points

2022-07-13T20:04:39.41+00:00
TO EVERYONE, THIS IS A RESPONSE TO SakhrHendawi and NOT related to the BitLocker key issue.

Sorry SkahrAlHendawi, I only just saw your question. Getting chat to open is tricky. You have to select the topic of your trouble and dig down until chat finally appears. Sometimes you even have to select a topic unrelated to your issue to get the chat to open. As an example, there is no support chat option for any BitLocker issue.

On multiple occasions, Microsoft support told me the same thing to get a chat window to open for ANY issue:

Go to Outlook

Click on Help (?)

type in "cannot send/receive email"

Go to the VERY bottom of all the suggestions

Say Yes to "Still need help?"

Now you can open the Chat option and type in your true issue

Do not be surprised if you go to the wrong support team in the beginning. I often did.
Sakhr Al-Hendawi 1 Reputation point

2022-07-13T20:11:53.437+00:00

Thanks, that would be useful in the future

23 answers

Kane S 156 Reputation points

2022-07-03T18:41:18.75+00:00

Thanks for continuing to follow-up with this issue.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Володимир 1 Reputation point

2022-07-04T21:10:26.523+00:00

When trying to delete the recovery key, the console shows an access error "403 forbidden"
Microsoft obviously broke something or it was done on purpose.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
JRB423 1 Reputation point

2022-07-06T19:46:56.813+00:00

This is still an issue. Support recommended I post here again so the devs had visibility of the issue? Doesn't make much sense to me but there ya go.
Please sign in to rate this answer.
Francois RUNAVOT 1 Reputation point

2022-07-08T16:08:44.12+00:00

As everyone, can't delete or add any key...
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
BorealG 1 Reputation point

2022-07-06T23:11:24.72+00:00
.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Patrick Armstrong 41 Reputation points

2022-07-07T03:14:21.047+00:00

Gotta love it. Post here so they have visibility. We have been posting here and 3 other forums that Development and Support allegedly monitor. They have known for more than THIRTY-SEVEN days now.
This just.... beyond...

TO WHOMEVER AT MICROSOFT IS MONITORING.
THE ISSUE IS STILL HAPPENING. LISTEN TO US.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Can't delete bitlocker recovery keys from microsoft account

23 answers

Your answer