Can't delete bitlocker recovery keys from microsoft account

Behdad 126

Hi,

I have been using my microsoft account for several years to store my bitlocker keys everytime I encrypt my C: and D: drives.
As part of the process every time I do the new encryption I first go to my microsoft account and delete the old keys.

However, suddenly today, I was not able to delete them. When I click and check the checkbox that I already have a copy of the keys and
click continue the dialog just sits there with the waiting feedback loop and never comes back. I looked in the browser console, it seems that
I get a 403/forbidden response back.

I have tried different browsers, clearing cache, logging out and in even tried it from my mobile and I still have the same problem.

Any Ideas as to why this happens? I appreciate your thoughts.

Thank you.

EDIT: 17/Jul/2022 : As of today, the issue is fixed for me. I managed to delete the old keys. I also saved my current keys and deleted them again successfully and have no further problems with this. Thanks Microsoft.

Kane S 156 Reputation points

2022-06-02T05:14:57.783+00:00

I'm having exactly the same issue, I've re-enabled Bitlocker on both my C and D Drives. When I go to my account to remove the old keys, nothing. It's just spinning with "Deleting this recovery key now..." I've tried from both Microsoft Edge, and Google Chrome, on two different computers, one with Windows 10, and the other with Windows 11.

Thanks in advance.
Behdad 126 Reputation points

2022-06-02T06:37:52.36+00:00

Thanks for your reply. Hopefully someone from MS will have some solution for us.
Kacyk-9417 6 Reputation points

2022-06-17T07:38:31.787+00:00

Same here. Nothing is deleting. It is a little more than annoying situation.

Flagship functionality and right now we have spinning dots...

Edit:

One more thing. After few days (during I tried to get some help from Microsoft to delete old keyes by them through https://widget.rave.office.net/chat?partner=SMC2&requestid= and THEY FAILED ** to give me any clue or hint what to do - except some really ridicules things from the script that could not work - because the problem is on their end, on their servers! ) I decided to make some tests on my own and had made encrypted system partition with option to save recovery key to my Microsoft account (https://account.microsoft.com/devices/recoverykey?refd=account.microsoft.com).
Then I had entered that website with backuped Bitlocker recovery keyes, to try one more time to delete that old unneeded anymore recovery keyes - still - can't do that.
**But more disturbing thing - ** like red flashing warning light** - is that already NEW FRESH RECOVERY KEY IS VISIBLE WITH -> **INVALID DATE !!!** Also - unable to delete that NEW ONE!
It like some part of the backup data of the recovery key is already corrupted! And it is done entirely in some weird way BY MICROSOFT SOFTWARE -> BITLOCKER and the way they store it (?) on their servers?!
Right now we can't relay on the security and validity of the backup information regarding Biltocker recovery keyes. THIS IS SERIOUS!
Patrick Armstrong 41 Reputation points

2022-06-20T17:02:21.103+00:00

Oh boy. Gheez. I just got off a support chat with tech support. I am shocked at the response I received...

The rep said, "Thank you for that information, Patrick. I just checked with our Microsoft Software engineers and I was able to get helpful data from them. Our Microsoft Accounts is currently having system upgrades to ensure a better user experience which affects the Bitlocker Recovery Key that cannot be deleted. Rest assured that our tech and engineering team are working hand in hand to get this done within the day. In the meantime, we need to make sure that the Bitlocker is turned off on your computer to make sure that you will not be prompt by it just in case you do majer changes on your computer. I'm truly sorry for the inconvenience that this may have caused you today, Patirck. Hoping for your kind consideration and understanding on this."

Um, pay attention there.
Turn off bitlocker on your computers
You might have to enter your bitlocker keys
WHAT???

I'm sure the rep must have been mis-speaking and I told them so. How major upgrades to the microsoft account system will negatively impact my personal computer experience.

Good luck everyone, let's hope we all get through this upgrade process unscathed.
Kacyk-9417 6 Reputation points

2022-06-20T18:16:15.01+00:00

Can't help myself...

One more time -> "Have You Tried Turning It Off And On Again?" ;)
Sakhr Al-Hendawi 1 Reputation point

2022-06-21T17:08:50.72+00:00

Might sound stupid, but where can you access support chat? I’ve been searching everywhere it only leads to the ‘Search Help’
Kacyk-9417 6 Reputation points

2022-06-21T18:19:38.527+00:00

You could try there -> https://support.microsoft.com/en-us/home/contact?SourceApp=smc2&ContactUsExperienceEntryPointAssetId=
Іван Пазенко 1 Reputation point

2022-06-29T03:36:27.47+00:00

Jun 28nd - still not working. Keys can’t be added and deleted
Guy Dye 1 Reputation point

2022-07-02T17:55:02.397+00:00

I'm glad I found this thread. And I'm extremely uncomfortable that the issue is still a thing after more than a week. If we were talking about anything other than BitLocker encryption keys, I wouldn't be as concerned. But, uh...mismanagement of BitLocker keys could be the difference between a working computer and a useless $2000 brick. So, what gives? Why is this so hard?
Cy 'kkm' K'Nelson 11 Reputation points

2022-07-08T22:42:07.85+00:00

Hi 244, if you don't mind my asking, are you positively certain that the keys cannot be added too? Another comment down below says they can. That makes a difference.
Cy 'kkm' K'Nelson 11 Reputation points

2022-07-08T23:09:28.273+00:00
I would save the recovery key on a USB stick or the numeric password into a password manager in addition to Account if I were you. I in fact do both. If you do not want unencrypted recovery material to ever be on an unencrypted USB storage, you can see the numeric password using elevated command line and copy it from there:

C:\> manage-bde -protectors -get C: . . . . Numerical password: ID: {1234CDEF-xxxx-xxxx-xxxx-xxxxxxxxxxxxx} Password: NNNNNN-....-NNNNNN

The first 8 of the ID, 1234CDEF in this example, is the same number as the Key ID on the Account website, and NNNNNN-....-NNNNNN is the 48-digit unlock password. Copy both from console into your password manager secure note or something, repeat for every encrypted drive letter, and then close command prompt window.

A recovery key is saved to USB stick as a hidden system file with the .BEK extension (the above command will display its name as "External key"). Use 'X:\> attrib -H -S *.BEK' in a command prompt on the USB drive (X: here) root to make them visible if you want. You can have as many saved on the same drive, they have GUID names, and Windows will pick the one it needs to decrypt a drive (the key protector GUID is stored unencrypted). The numeric password is saved as a normal text file.

For an ultimate security, a keypad-secured USB stick from a reputable vendor goes a long way. Whether you need one is your call based on the value of the BitLocker-encrypted data to the malicious party.
Patrick Armstrong 41 Reputation points

2022-07-13T20:04:39.41+00:00
TO EVERYONE, THIS IS A RESPONSE TO SakhrHendawi and NOT related to the BitLocker key issue.

Sorry SkahrAlHendawi, I only just saw your question. Getting chat to open is tricky. You have to select the topic of your trouble and dig down until chat finally appears. Sometimes you even have to select a topic unrelated to your issue to get the chat to open. As an example, there is no support chat option for any BitLocker issue.

On multiple occasions, Microsoft support told me the same thing to get a chat window to open for ANY issue:

Go to Outlook

Click on Help (?)

type in "cannot send/receive email"

Go to the VERY bottom of all the suggestions

Say Yes to "Still need help?"

Now you can open the Chat option and type in your true issue

Do not be surprised if you go to the wrong support team in the beginning. I often did.
Sakhr Al-Hendawi 1 Reputation point

2022-07-13T20:11:53.437+00:00

Thanks, that would be useful in the future

23 answers

Patrick Armstrong 41 Reputation points

2022-07-07T03:17:22.537+00:00

Good luck on the escalation to Level 2 support.
I have 3 tickets escalated to level 2 support. On the first 2 everyone says, "we never heard of it before this," BAH!
I was promised return phone calls too. Never got them. On one call, I've now been waiting 19 days for a call back.
Please sign in to rate this answer.
George R 6 Reputation points

2022-07-07T15:46:22.857+00:00

This is discouraging to know it's been a problem for over a month. I just hit it last night. My new keys are uploading with proper dates so I guess that's something.

Not a good look for a process that is supposed to secure user data!

Cy 'kkm' K'Nelson 11 Reputation points

2022-07-08T23:16:38.357+00:00

Thanks, good to know that the new keys are uploading now! There was a comment from @Іван Пазенко that they hadn't 9 days ago.

George R 6 Reputation points

2022-07-09T04:08:28.507+00:00

I have to amend my last update. My keys are still uploading, but the date can be wrong. The second key has tomorrows date, and no it's not yet 12 am in my time zone.
But I did verify the keys are correct.

Thanks.

George.

Patrick Armstrong 41 Reputation points

2022-07-09T19:17:22.667+00:00

Hmmm interesting on the timestamp issue.
Could the date be based on UTC-0 time and not your time zone time?

George R 6 Reputation points

2022-07-10T21:47:34.813+00:00

Patrick UTC is possible. It was just after 11 pm when I uploaded my keys. I'd be happy to test it out to help the cause if someone let's me know what data they want me to collect. I'm not sure a few more uploads around 11pm would prove much without knowing where that date comes from.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Patrick Armstrong 41 Reputation points

2022-07-09T02:23:58.14+00:00

Interesting.
Now in my case, I tested the issue on Win11 Pro using Edge, Chrome, and Firefox
Then I tested on my iPhone and my iPads using Safari and Chrome with my Internet enabled
Then I tested on my iPhone using both Safari and chrome with Cellular Data only.
I also used private/guest/incognito mode to ensure there were no cached files.

The issue is not the Browser.
Nor is it the device being used.
It is in accounts and/or a handshake between the device/OS and accounts.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Kacyk-9417 6 Reputation points

2022-07-13T11:31:07.063+00:00

Cleared!

Every single one right now. Even with "invalid date".

Seems to be fixed. At least a part with the spinning dots.

And... Have a little problem with "I want to believe" and I'm really hesitating to try to "save to your Microsoft account" now :(

The trust is no more - at least for now...
Please sign in to rate this answer.
Patrick Armstrong 41 Reputation points

2022-07-13T15:41:26.09+00:00

I was able to test deleting and saving on not just my own account, but 2 others.
Everything works correctly.
FINALLY!
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Sakhr Al-Hendawi 1 Reputation point

2022-07-13T11:46:55.577+00:00

@Kacyk-9417 , thanks for the update!
I was able to delete as well, and I tried to re-upload my keys and delete them and it worked... Finally!
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Володимир 1 Reputation point

2022-07-13T19:43:23.887+00:00

Yes, the problem is fixed
Please sign in to rate this answer.
Johannes Kingma 26 Reputation points

2022-07-16T19:08:24.31+00:00

that really doesn't help. Why didn't microsoft inform their paying customers ?
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Can't delete bitlocker recovery keys from microsoft account

23 answers

Your answer