Microsoft Releases Emergency Fix for BitLocker Recovery Issue
Microsoft has released an emergency out-of-band update (KB5061768) to address a critical issue affecting Windows 10 systems. This issue caused systems to boot into BitLocker recovery screens following the installation of the May 2025 security updates.
Microsoft has released an emergency out-of-band update (KB5061768) to address a critical issue affecting Windows 10 systems. This issue caused systems to boot into BitLocker recovery screens following the installation of the May 2025 security updates.
The issue emerged after the installation of the Windows 10 KB5058379 security update on May 13, 2025. It caused the Local Security Authority Subsystem Service (LSASS) to terminate unexpectedly, triggering Automatic Repair processes that required BitLocker recovery keys.
Microsoft explained that affected devices might fail to start enough times to trigger an Automatic Repair. On devices with BitLocker enabled, the recovery key is required to initiate the repair.
The issue affects systems running Windows 10 version 22H2, Windows 10 Enterprise LTSC 2021, and Windows 10 IoT Enterprise LTSC 2021, particularly those with Intel vPro processors and Intel Trusted Execution Technology (TXT) enabled.
Microsoft has released an emergency out-of-band update (KB5061768) to address a critical issue affecting Windows 10 systems.
The emergency update KB5061768 (OS Builds 19044.5856 and 19045.5856) is available through the Microsoft Update Catalog as a cumulative update. It is recommended for immediate installation by affected organizations.
For systems unable to boot, Microsoft suggests temporarily disabling Intel VT for Direct I/O (VTD/VTX) and Intel TXT in BIOS/UEFI settings. After installing the update, these features can be re-enabled, requiring the BitLocker recovery key.
Microsoft advises maintaining secure backups of BitLocker recovery keys, as they cannot retrieve or provide lost keys. This release comes as part of Microsoft's preparations for the end of support for Windows 10 on October 14, 2025. After this date, no free updates or technical assistance will be available.
The update also includes the latest servicing stack update (SSU KB5058526) for builds 19044.5853 and 19045.5853, enhancing update reliability for future installations.
Organizations not experiencing BitLocker recovery prompts may not need to install this emergency update, as the issue primarily affects enterprise environments using specific Intel security features.
Based on reporting by Cyber Security News.
