Hello, Can Windows Updates modify the system boot information so that BitLocker would need to be suspended/resumed after an update? I get a message "system boot information has changed since bit locker was enabled" every boot, requiring me to re-enter the 48 digit key before boot up. If I don't enter the key, I can hit ESC eventually coming to a windows boot manager screen telling me to do a repair, status 0xc0210000 on file winload.exe, info key could not be obtained to unlock volume. If I boot from install disk and try to restore winload.exe, I get an error about file is in use or locked or insufficient permission. don't remember the exact response, haven't tried the restore procedure in a while. Suspending and resuming doesn't help at all. I also had UPEK Protector Suite 2009 installed with boot protection which adds a BIOS extension to prompt for fingerprint scan as soon as laptop turns on. It is capable of passing the fingerprint scan onto windows as logon credentials. So I was thinking that it would be modifying memory space and thus the boot environment each time causing bitlocker to detect something has changed in bios/hardware/boot info. Thanks

Windows updManoj Sehgal

Windows update is updating Microsoft components which does not trigger BitLocker recovery. (BIOS is not a Microsoft component.) In your case, there is some other component or software which changes the bcd store which causes bitlocker to go for recovery. If you check system logs you will some error messages for bitlocker driver and will give some more information. I hope this helps.Manoj Sehgal

Hi, You can refer to this article to get more information. http://technet.microsoft.com/en-us/library/ee449438(v=ws.10).aspx#BKMK_DecryptFirst Niki Han TechNet Community Support