Shop-safe BitLocker workflow (NLCRC original).
Before motherboard / TPM work
- Suspend BitLocker or decrypt when you will replace the board, clear TPM, or flash BIOS.
- Capture the 48-digit recovery key from the Microsoft account, AD/Entra, or printed sheet.
If Windows asks for recovery
- Enter the key once, then suspend protection before further hardware changes.
- manage-bde -status (elevated) shows protectors and percentage encrypted.
After repair
- Confirm TPM is present in UEFI.
- Resume BitLocker only when the platform is stable and the customer wants encryption on.
Never “just clear TPM” on a customer machine without a recovery plan.
Windows & PowerShell
BitLocker and TPM: unlock, suspend, and avoid bricking a board swap
Board: Windows 11 · 25 views · Solved
Repair forum
Board-level discussion, BIOS library, and mail-in repair.
Free diagnostic
Return shipping £15
)),
'compact' => true,
])
Sign in to reply.