NewApp Digest
search bot

recovery mode

Microsoft April Update Forces BitLocker Recovery on Servers
Winsage
April 16, 2026

Microsoft April Update Forces BitLocker Recovery on Servers

A recent Microsoft security update, April 2026 KB5082063, has caused issues for administrators of Windows Server 2025 and Windows 11 systems, with many devices entering BitLocker recovery mode after reboot, requiring a 48-digit recovery key. This issue primarily affects enterprise-managed systems with specific TPM Group Policy settings involving PCR7 validation. Similar problems have been reported with updates KB5083769 and KB5082052 on Windows 11. The issue arises from five conditions: BitLocker must be enabled on the OS drive, the Group Policy must include PCR7, the msinfo32.exe tool must show Secure Boot State PCR7 Binding as “Not Possible,” the Windows UEFI CA 2023 certificate must be in the Secure Boot Signature Database, and the device must not be using the 2023-signed Windows Boot Manager. Microsoft suggests two workarounds: removing the TPM validation Group Policy before the update and re-enabling BitLocker, or applying a Known Issue Rollback (KIR) before installation. Skipping the April updates is not advisable due to the addressing of 167 vulnerabilities, including two zero-days. BitLocker recovery issues following updates have been recurring since 2022, with similar incidents reported in August 2022, August 2024, and May 2025, indicating ongoing challenges with Secure Boot certificates and TPM validation bindings in enterprise environments.
Microsoft: April updates trigger BitLocker key prompts on some servers
Winsage
April 16, 2026

Microsoft: April updates trigger BitLocker key prompts on some servers

Microsoft announced that certain Windows Server 2025 devices may experience a BitLocker recovery prompt after installing the April 2026 KB5082063 Windows security update. The recovery mode will be triggered under specific conditions: BitLocker must be enabled on the operating system drive, the Group Policy for TPM validation must be configured with PCR7, the Secure Boot State PCR7 Binding must indicate "Not Possible," the Windows UEFI CA 2023 certificate must be in the Secure Boot Signature Database, and the device must not be using the 2023-signed Windows Boot Manager. Microsoft stated that this issue is unlikely to affect personal devices, as the configurations are mainly found in enterprise-managed systems. They are working on a resolution and recommend administrators remove the Group Policy configuration before deploying the update. If removal is not possible, applying a Known Issue Rollback (KIR) is advised to prevent triggering the recovery prompt. Microsoft has previously addressed similar BitLocker recovery prompt issues in May 2025, August 2024, and August 2022.
Microsoft Introduces New Secure Boot Certificates Before June Deadline
Winsage
February 13, 2026

Microsoft Introduces New Secure Boot Certificates Before June Deadline

The foundational security certificates supporting Windows Secure Boot, introduced in 2011, will expire in mid-2026, specifically in June and October. Microsoft and PC manufacturers are updating the Windows ecosystem to address this. Devices that do not receive updated certificates may face security limitations and compatibility issues with newer operating systems and hardware. The transition is described as a "generational refresh" of the trust infrastructure for Windows. Systems failing to update will still function but may enter a "degraded security state," unable to install new security mitigations or newer operating systems. Most users will receive updates automatically through Windows Update, while older systems may require manual intervention. Systems at risk include those running unsupported Windows versions, with Secure Boot disabled, or not enrolled in Extended Security Updates. Users should check their Secure Boot status using PowerShell commands to ensure they are using the new certificates. The update affects not only Windows PCs but also other devices utilizing UEFI Secure Boot.
Nvidia confirms October Windows updates cause gaming issues
Winsage
November 22, 2025

Nvidia confirms October Windows updates cause gaming issues

Nvidia has acknowledged that recent security updates have caused gaming performance challenges for users on Windows 11 versions 24H2 and 25H2. To address these issues, Nvidia released the GeForce Hotfix Display Driver version 581.94. This hotfix driver is a beta version and has not undergone the standard quality assurance procedures, allowing for quicker deployment. Users may experience diminished performance in certain games after installing the Windows 11 October 2025 update, specifically KB5066835. The hotfix drivers are optional and have been expedited to provide timely solutions. Users can access the driver for both Windows 10 x64 and Windows 11 x64 systems via Nvidia's Customer Care support site. Additionally, Microsoft has addressed various bugs in recent Windows updates, including issues with localhost HTTP connections, smart card authentication, and the Windows Recovery Environment.
Microsoft unveils two new Windows 11 recovery tools: Cloud Rebuild and Point-in-Time Restore
Winsage
November 19, 2025

Microsoft unveils two new Windows 11 recovery tools: Cloud Rebuild and Point-in-Time Restore

Microsoft is introducing new recovery options for Windows 11 at its Ignite developer conference, focusing on Intune remote recovery via WinRE. Two new recovery actions are being unveiled: 1. Point-in-time restore: This feature allows a PC to revert to a previous state to resolve issues like update failures and driver conflicts. It will be available in preview form within the Windows Insider build of Windows 11 this week. 2. Cloud rebuild: This option enables a fresh start for devices with persistent issues without the need for hardware shipping or service desk visits. Admins can select the Windows release and language through the Intune portal, prompting the PC to download installation media and self-rebuild. This process uses Autopilot for zero-touch provisioning and allows for the restoration of user data and settings via OneDrive and Windows Backup for Organizations. Microsoft plans to roll out these features in the first half of the upcoming year.
Windows 11 Introduces Point-in-Time Restore & More for Faster, Safer PC Recovery
Winsage
November 19, 2025

Windows 11 Introduces Point-in-Time Restore & More for Faster, Safer PC Recovery

Microsoft is enhancing the recovery capabilities of Windows 11 with a suite of tools aimed at simplifying device restoration for IT administrators. The Point-in-Time Restore feature allows administrators to revert a device to a previous state, currently available in preview mode in Windows Insider builds. The Quick Machine Recovery (QMR) system, refined since its August launch, helps restore functionality to multiple devices experiencing boot failures and will soon include direct networking support and Autopatch QMR management for automatic update handling. The Intune remote recovery feature provides insights into when a managed PC enters recovery mode, allowing for remote script deployment and fixes, and has been expanded to include Windows Server virtual machines via the Azure Portal. The Cloud Rebuild function enables administrators to rebuild devices that cannot be repaired conventionally by downloading fresh installation media and restoring settings and data using OneDrive and Windows Backup for Organizations, with Autopilot applying necessary enrollment and policies.
Windows 11 Adds New Recovery Tools to Minimize Downtime
Winsage
November 19, 2025

Windows 11 Adds New Recovery Tools to Minimize Downtime

Microsoft unveiled new Windows Recovery tools during the Ignite 2025 keynote to help IT teams reduce downtime and streamline remediation processes. Enhancements to Quick Machine Recovery (QMR) include WinRE networking support, which will initially support Ethernet and later add Enterprise Wi-Fi capabilities. Autopatch can now manage and approve QMR updates, currently in public preview. Microsoft Intune's remote recovery via WinRE allows IT administrators to monitor devices in recovery mode and deploy scripts directly from the console, extending to Windows Server VMs through the Azure Portal. New recovery options for Windows PCs include a point-in-time restore feature for reverting to previous states and a Cloud rebuild feature for remotely reinstalling Windows 11 on malfunctioning devices. These updates are expected to be generally available to commercial customers in the first half of 2026. Microsoft has also introduced Autopatch update readiness in preview, providing real-time insights into device update readiness through a unified Intune dashboard. Additionally, new tools for incident management include Mission Critical Services for Microsoft 365, allowing collaboration with Windows engineers, and Windows 365 Reserve, which offers secure temporary Cloud PCs. Microsoft Intune will issue alerts when devices enter WinRE to prioritize recovery efforts, and a Digital Signage mode will prevent error messages on non-interactive public displays.
I'm exhausted by incessant Windows 11 bugs - and the return of the BitLocker recovery glitch is an ugly sight
Winsage
November 6, 2025

I’m exhausted by incessant Windows 11 bugs – and the return of the BitLocker recovery glitch is an ugly sight

Microsoft has acknowledged a new issue affecting Windows 10 and Windows 11 users related to the BitLocker encryption feature, causing unexpected booting into BitLocker recovery mode, particularly for users unaware of their encryption key. This problem primarily impacts Windows 11 versions 25H2 and 24H2, and Windows 10 version 22H2, with Intel-based systems being the most affected. Users are advised to ensure their encryption key is available or consider disabling BitLocker due to the frequency of issues. Microsoft has indicated that this bug should not result in data corruption.
Search