Make Duplicate Key Recovery and Pause Lock Encryption before Updating Basic Input/Output System (BIOS)

Duplicate Key Recovery is a feature in Microsoft Windows Pro and Enterprise operating systems that provides full-disk encryption. It is a unique 48-digit numerical password that can secure or unlock the data. However, some users reported receiving an error message – Kindly make a duplicate key recovery and pause lock encryption before updating the BIOS, when attempting to update the BIOS.

Kindly make a duplicate key recovery and pause lock encryption before updating the BIOS

For security reasons, Windows will prompt you to create a duplicate key recovery and pause encryption before updating the BIOS. To resolve this issue, you must perform the following steps when encountering the error message.

1. Create a backup of the recovery key
2. Pause the recovery key

Let’s discuss each step in detail.

1] Create a backup of the recovery key

As instructed in the error message, the first task is to create a backup of the recovery key. The process is straightforward, as you only need to follow the steps mentioned below.

• Press the Windows key and search for BitLocker in the Windows search bar.
• In the top left corner of the window, click on Device Encryption settings.
• Now, you will be on the Device encryption page. Under the Related section, select the BitLocker drive encryption option.
• On the right side of the window, click on the Backup your recovery key option.
• Here, select the Print the recovery key option (or one of the other available options).
• You can either print the recovery key or save it as a PDF. For the latter option, choose the Microsoft Print to PDF option and click the Print button.
• Next, specify the file name (BitLocker key) for the backup.
• Finally, click the Save button.

By following these steps, you have successfully created a backup of the recovery key. It is recommended to write it down or take a picture of the key for additional security.

2] Pause Lock Protection

Pausing lock protection will temporarily disable the security feature. However, you can resume it at any time. This action is necessary to prepare your system for a BIOS upgrade. Follow the steps below to pause lock protection.

1. Search for Control Panel in the Start Menu search bar.
2. Go to System and Security > BitLocker Drive Encryption
3. Once you reach the BitLocker page, select Suspend Protection.
4. Click Yes.

Now that BitLocker is disabled, you can proceed with updating your BIOS without encountering any error messages.

Note: If you wish to resume BitLocker, go to the same page – Control Panel > System and Security > BitLocker Drive Encryption, and click Resume Protection.

That’s it!

Read: Failed to open BitLocker Control Panel Tool, 0x80004005

Is it necessary to pause BitLocker before updating the BIOS?

Most Original Equipment Manufacturers will instruct you to pause BitLocker before updating the BIOS. Failure to pause BitLocker will result in the recovery pin being recognized when your system boots up after the BIOS update. Therefore, it is essential to create a backup of the recovery key and pause BitLocker before updating the BIOS.

Also Read: How to create a BitLocker Drive Encryption shortcut?

How can I pause BitLocker encryption before a BIOS update?

You can follow the steps provided in this post to pause BitLocker recovery before updating the BIOS. However, there is an alternative method to accomplish the same task. Open PowerShell as an administrator and run the command Suspend-BitLocker -MountPoint "C:" -RebootCount 0. Before pausing BitLocker Protection, make sure to create a backup of the recovery pin.

Read: Your recovery key couldn’t be saved to this location – BitLocker.