Back Feeds.4Sysops

Microsoft resolves BitLocker recovery loops in Windows Server 2025

Feeds.4Sysops •IT News • June 11, 2026

Microsoft has released cumulative updates to resolve a persistent bug that forced Windows Server 2025 and Windows 11 systems into BitLocker recovery mode. The issue was triggered by specific Group Policy configurations involving Trusted Platform Module validation profiles and the inclusion of PCR7 in the validation process. Affected systems would prompt for a recovery key immediately following the installation of security updates that modified boot files. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Resolves BitLocker Recovery Bug in Windows Server 2025 Microsoft has fixed a bug affecting Windows Server 2025 and Windows 11 systems that caused them to enter BitLocker recovery mode after installing security updates. The issue was linked to specific Group Policy configurations involving Trusted Platform Module (TPM) validation profiles, particularly with PCR7 settings. Affected devices prompted users for a recovery key immediately following the installation of updates that modified boot files. Microsoft acknowledged the issue after the April 2026 Patch Tuesday and released cumulative updates to address it. The updates were included in KB5094125 for Windows Server 2025 and KB5093998 for Windows 11 23H2. IT administrators were advised to adjust Group Policy settings or apply a Known Issue Rollback if they could not deploy the updates immediately. The bug primarily impacted enterprise systems rather than personal devices. The resolution aims to prevent unexpected recovery prompts during system restarts. 2 sources 28

Extracted Entities

Platforms (2)

Windows 11 Windows Server 2025