Microsoft fixes BitLocker recovery bug on Windows Server 2025
ID: 4cef931e-788b-5871-8935-dd4676074c55
STIX ID: report--4cef931e-788b-5871-8935-dd4676074c55
Feed Name: Bleeping Computer
Threat Score
Microsoft fixed an issue where certain enterprise-managed devices with BitLocker enabled and an incompatible TPM/PCR7 Group Policy entered BitLocker recovery on the first restart after April 2026 security updates. The company released KB5094125 (Windows Server 2025) and KB5093998 (Windows 11 23H2) to block the automatic switch to the 2023-signed Windows Boot Manager that caused the prompt; recommended mitigations include removing the Group Policy prior to update deployment or applying a Known Issue Rollback.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.