{"id":1070,"date":"2021-02-17T18:45:29","date_gmt":"2021-02-17T13:15:29","guid":{"rendered":"https:\/\/xiarch.com\/blog\/?p=1070"},"modified":"2021-06-07T10:56:36","modified_gmt":"2021-06-07T05:26:36","slug":"windows-10-secure-boot-update-execute-bit-locker-recovery-key","status":"publish","type":"post","link":"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/","title":{"rendered":"Windows 10 Secure Boot Update Execute Bit-Locker Recovery Key!"},"content":{"rendered":"\n<p><p style=\"text-align: justify\">Microsoft discovered another problem faced by the Windows 10 users, who are recently updating the security patch KB453568o, that bypasses the vulnerability presents in the Secure Boot.<\/p><\/p>\n\n\n\n<p><p style=\"text-align: justify\">Windows affected versions by this update also include the releases from v1607 to v1909 in Windows 10, Windows 8.1, Window Server 2012, and Windows Server 2012 R2.<\/p><\/p>\n\n\n\n<p><p style=\"text-align: justify\">Whereas, Secure Boot is the security feature that blocks unauthorized operating system bootloaders executing on the computer using UEFI firmware and TPM chip to prevent rootkits from loading while the OS startup process.<\/p><\/p>\n\n\n\n<p>Read the upcoming section to know about how this update affects the Bit Locker?<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>How Update Provoke Bit-Locker Recovery Mode?<\/strong><\/h2>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img decoding=\"async\" loading=\"lazy\" width=\"1000\" height=\"500\" src=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/02\/windows-update-intiate-bit-locker-image.png\" alt=\"Windows 10 Secure Boot Update Execute Bit-Locker Recovery Key!\" class=\"wp-image-1071\" srcset=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/02\/windows-update-intiate-bit-locker-image.png 1000w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/02\/windows-update-intiate-bit-locker-image-300x150.png 300w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/02\/windows-update-intiate-bit-locker-image-768x384.png 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/figure><\/div>\n\n\n\n<p><p style=\"text-align: justify\">While installing the update named KB453568o on the system it will lead the user to the Bit Locker recovery key that is requested after rebooting the system.<\/p><\/p>\n\n\n\n<p><p style=\"text-align: justify\">However, Microsoft says that \u201cIn case the Bit Locker Group Policy uses TPM platform authorization and UEFI firmware configuration then PCR7 is selected by the update policy, which demands Bit Locker recovery key in some particular devices where PCR7 binding is not available. To check the PCR7 binding status, initiate Microsoft System Information tool using admin credentials.\u201d<\/p><\/p>\n\n\n\n<p><p style=\"text-align: justify\">Bit-Locker is a Microsoft encryption feature that is stated from Windows Vista and applies the XTS-AES encryption algorithm while encrypting the computer hard drives or other removable drives to ensure user privacy and security.<\/p><\/p>\n\n\n\n<p>Now, read the upcoming section to check about the workarounds available, while fixing this issue.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Workarounds by Microsoft<\/strong><\/h2>\n\n\n\n<p><p style=\"text-align: justify\">Microsoft advises suspending the Bit Locker services for one boot cycle. It also depends on the device Credential Gard configuration as toggled using&nbsp;<strong>Mange-bde -Protectors -Disable C: -RebootCount1&nbsp;<\/strong>and for three reboot cycles use&nbsp;<strong>Mange-bde -Protectors -Disable C: -RebootCount3<\/strong>.<\/p><\/p>\n\n\n\n<p><p style=\"text-align: justify\">These commands temporarily paused the Bit Locker before updating the KB453568o, work as the workaround, and resolve the Bit Locker recovery problem.<\/p><\/p>\n\n\n\n<p><p style=\"text-align: justify\">As the installation is finished the system gets restarted 3 times in a row and after that, you have to reboot the system once while enabling the Bit Locker protection.<\/p><\/p>\n\n\n\n<p><p style=\"text-align: justify\">Users who don\u2019t want this resolution or the users who are unable to script the update can simply roll out with thousands of endpoints that advised you to stop the KB453568o security update executing from the Endpoint Manager Configuration Manager.<\/p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft discovered another problem faced by the Windows 10 users, who are recently updating the security patch KB453568o, that bypasses the vulnerability presents in the Secure Boot. Windows affected versions by this update also include the releases from v1607 to v1909 in Windows 10, Windows 8.1, Window Server 2012, and Windows Server 2012 R2. Whereas, [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":1072,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[15],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.11 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Windows 10 Secure Boot Update Execute Bit-Locker Recovery Key! - Xiarch Solutions Private Limited<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Windows 10 Secure Boot Update Execute Bit-Locker Recovery Key! - Xiarch Solutions Private Limited\" \/>\n<meta property=\"og:description\" content=\"Microsoft discovered another problem faced by the Windows 10 users, who are recently updating the security patch KB453568o, that bypasses the vulnerability presents in the Secure Boot. Windows affected versions by this update also include the releases from v1607 to v1909 in Windows 10, Windows 8.1, Window Server 2012, and Windows Server 2012 R2. Whereas, [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/\" \/>\n<meta property=\"og:site_name\" content=\"Xiarch Solutions Private Limited\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/xiarch\/\" \/>\n<meta property=\"article:published_time\" content=\"2021-02-17T13:15:29+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-06-07T05:26:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/02\/Untitled-design-12.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"675\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Xiarch Security\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@xiarch\" \/>\n<meta name=\"twitter:site\" content=\"@xiarch\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Xiarch Security\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/\"},\"author\":{\"name\":\"Xiarch Security\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c\"},\"headline\":\"Windows 10 Secure Boot Update Execute Bit-Locker Recovery Key!\",\"datePublished\":\"2021-02-17T13:15:29+00:00\",\"dateModified\":\"2021-06-07T05:26:36+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/\"},\"wordCount\":384,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\"},\"articleSection\":[\"Infosec News\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/\",\"url\":\"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/\",\"name\":\"Windows 10 Secure Boot Update Execute Bit-Locker Recovery Key! - Xiarch Solutions Private Limited\",\"isPartOf\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#website\"},\"datePublished\":\"2021-02-17T13:15:29+00:00\",\"dateModified\":\"2021-06-07T05:26:36+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/xiarch.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Windows 10 Secure Boot Update Execute Bit-Locker Recovery Key!\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/xiarch.com\/blog\/#website\",\"url\":\"https:\/\/xiarch.com\/blog\/\",\"name\":\"Xiarch Solutions Private Limited\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/xiarch.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\",\"name\":\"Xiarch\",\"url\":\"https:\/\/xiarch.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png\",\"contentUrl\":\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png\",\"width\":300,\"height\":300,\"caption\":\"Xiarch\"},\"image\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/xiarch\/\",\"https:\/\/twitter.com\/xiarch\",\"https:\/\/www.linkedin.com\/company\/xiarch\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c\",\"name\":\"Xiarch Security\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g\",\"caption\":\"Xiarch Security\"},\"sameAs\":[\"https:\/\/xiarch.com\/blog\/\"],\"url\":\"https:\/\/xiarch.com\/blog\/author\/vector\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Windows 10 Secure Boot Update Execute Bit-Locker Recovery Key! - Xiarch Solutions Private Limited","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/","og_locale":"en_US","og_type":"article","og_title":"Windows 10 Secure Boot Update Execute Bit-Locker Recovery Key! - Xiarch Solutions Private Limited","og_description":"Microsoft discovered another problem faced by the Windows 10 users, who are recently updating the security patch KB453568o, that bypasses the vulnerability presents in the Secure Boot. Windows affected versions by this update also include the releases from v1607 to v1909 in Windows 10, Windows 8.1, Window Server 2012, and Windows Server 2012 R2. Whereas, [&hellip;]","og_url":"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/","og_site_name":"Xiarch Solutions Private Limited","article_publisher":"https:\/\/www.facebook.com\/xiarch\/","article_published_time":"2021-02-17T13:15:29+00:00","article_modified_time":"2021-06-07T05:26:36+00:00","og_image":[{"width":1200,"height":675,"url":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/02\/Untitled-design-12.png","type":"image\/png"}],"author":"Xiarch Security","twitter_card":"summary_large_image","twitter_creator":"@xiarch","twitter_site":"@xiarch","twitter_misc":{"Written by":"Xiarch Security","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/#article","isPartOf":{"@id":"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/"},"author":{"name":"Xiarch Security","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c"},"headline":"Windows 10 Secure Boot Update Execute Bit-Locker Recovery Key!","datePublished":"2021-02-17T13:15:29+00:00","dateModified":"2021-06-07T05:26:36+00:00","mainEntityOfPage":{"@id":"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/"},"wordCount":384,"commentCount":0,"publisher":{"@id":"https:\/\/xiarch.com\/blog\/#organization"},"articleSection":["Infosec News"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/","url":"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/","name":"Windows 10 Secure Boot Update Execute Bit-Locker Recovery Key! - Xiarch Solutions Private Limited","isPartOf":{"@id":"https:\/\/xiarch.com\/blog\/#website"},"datePublished":"2021-02-17T13:15:29+00:00","dateModified":"2021-06-07T05:26:36+00:00","breadcrumb":{"@id":"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/xiarch.com\/blog\/windows-10-secure-boot-update-execute-bit-locker-recovery-key\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/xiarch.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Windows 10 Secure Boot Update Execute Bit-Locker Recovery Key!"}]},{"@type":"WebSite","@id":"https:\/\/xiarch.com\/blog\/#website","url":"https:\/\/xiarch.com\/blog\/","name":"Xiarch Solutions Private Limited","description":"","publisher":{"@id":"https:\/\/xiarch.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/xiarch.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/xiarch.com\/blog\/#organization","name":"Xiarch","url":"https:\/\/xiarch.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png","contentUrl":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png","width":300,"height":300,"caption":"Xiarch"},"image":{"@id":"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/xiarch\/","https:\/\/twitter.com\/xiarch","https:\/\/www.linkedin.com\/company\/xiarch"]},{"@type":"Person","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c","name":"Xiarch Security","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g","caption":"Xiarch Security"},"sameAs":["https:\/\/xiarch.com\/blog\/"],"url":"https:\/\/xiarch.com\/blog\/author\/vector\/"}]}},"_links":{"self":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/1070"}],"collection":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/comments?post=1070"}],"version-history":[{"count":1,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/1070\/revisions"}],"predecessor-version":[{"id":1073,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/1070\/revisions\/1073"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/media\/1072"}],"wp:attachment":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/media?parent=1070"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/categories?post=1070"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/tags?post=1070"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}