BIOS Update

[User1030]

Hi - The HP Support Assistant proposes a BIOS Update but also recommends to make a backup of the TPM Bitlocker Encryption Key before installing the update. This must relate to some system components as on the harddrive Bitlocker is not activated. How do I retrieve this encryption key? I have not found any such information in the system app. Can anybody help? 

[Hawks_Eye · Accepted solution]

Hi @User1030 

Welcome to the HP Support Community! We're here to help you get back up and running.

Thank you for explaining the situation—and I’m truly sorry this has caused confusion. It’s unsettling when a BIOS update prompts you to back up a BitLocker recovery key, especially when BitLocker doesn’t appear to be enabled on your drive. 

Let’s walk through what’s happening and how to safely retrieve the key.

 

Why You're Seeing This Warning

Even if BitLocker isn’t manually activated, Windows 11 can enable a feature called Device Encryption automatically during setup—especially if:

• You signed in with a Microsoft account.
• Your system meets the hardware requirements (TPM 2.0, Secure Boot, etc.).

This form of encryption is managed silently in the background and uses the TPM to protect your data. A BIOS update can reset TPM configurations, which may trigger a recovery prompt unless the key is backed up.

 

How to Retrieve Your TPM/BitLocker Recovery Key

1. Check Your Microsoft Account Online

If Device Encryption is active, the recovery key is usually stored in your Microsoft account.

• Visit Microsoft’s BitLocker Recovery Key page.
• Sign in with the same Microsoft account used on your Pavilion 16.
• Look for a recovery key associated with your device name.

 

2. Use Command Prompt to Check Encryption Status

To confirm whether encryption is active:

• Open Command Prompt as administrator.
• Type:manage-bde -status
• Press Enter. Look for the Protection Status and Conversion Status under the C: drive.

If it says “Protection On,” then encryption is active—even if BitLocker wasn’t manually enabled.

 

3. Check Device Encryption Settings

• Go to Settings > Privacy & Security > Device Encryption.
• If this option is visible and turned on, you can click “Back up your recovery key” from that screen.

If the option isn’t visible, your system may not be using Device Encryption.

 

Before Proceeding with BIOS Update

If you confirm that encryption is active and you’ve retrieved the recovery key, store it safely—either on a USB drive or printed copy. This ensures that if the system prompts for the key after the BIOS update, you’ll be able to unlock your drive.

For additional guidance, HP provides a detailed support article:
HP PCs – Using BitLocker and Finding the Recovery Key

You’ve taken a thoughtful approach by pausing before the update, and I’m here to help ensure everything goes smoothly. If you’d like help interpreting your encryption status or walking through the BIOS update safely, I’ll be right here.

If my response helped, please mark it as an Accepted Solution! ✅ It helps others and spreads support. 💙 Also, tapping "Yes" on "Was this reply helpful?" makes a big difference! Thanks! 😊

Take care, and have an amazing day!

Regards, 

Hawks_Eye