Microsoft Acknowledges KB5058379 BitLocker Issue Causing Windows 10 Crashes and Requests Recovery Key

Date: May 15, 2025 – Recent reports have surfaced regarding a critical issue stemming from the Windows 10 May 2025 update, specifically related to the KB5058379 patch. This update appears to trigger unexpected BitLocker Recovery prompts on various Intel-powered PCs. Microsoft has now acknowledged this issue, confirming that it is indeed related to the problematic update.

Upon installation of the Windows 10 KB5058379 update (released on May 13, 2025), users with Intel PCs have found themselves unexpectedly greeted by the BitLocker Recovery screen. This has been widely observed on devices manufactured by reputable brands such as Dell, Lenovo, and HP, indicating that the problem is not isolated to specific OEMs but originates from the KB5058379 update itself.

After applying the KB5058379 update, users may encounter the ominous blue screen prompting, “Enter the recovery key to proceed” or, in more severe instances, a Blue Screen of Death (BSOD) leading to the same BitLocker prompt.

In situations where BitLocker protection is not enabled—though this is seldom the case—users may end up at the Automatic Repair screen. Below is the pattern observed:

A recent update to Microsoft’s support documentation indicated that Microsoft is aware of an LSASS (Local Security Authority Subsystem Service) crash issue, which has been linked to this update.

When the LSASS service fails, the ability to authenticate your Windows account becomes compromised, often preventing entry to the system altogether. This crash might occur before logging into Windows, triggering either the Recovery Menu or the BitLocker Recovery screen.

Compounding the issue, Microsoft has identified that this abnormal behavior predominantly affects systems housing Intel’s 10th-generation processors or newer, including Intel vPro processors. The root cause is a compatibility conflict between the KB5058379 update and the Intel Trusted Execution Technology (TXT).

Understanding Intel TXT and its Role in Windows Update Issues

Intel describes Trusted Execution Technology (TXT) as a security measure designed to safeguard systems from potential BIOS corruption due to software attacks. Its activation is generally the default setting on many Intel systems. However, the exact nature of how the May 2025 Update interferes with the Intel TXT feature remains unclear, as this technology has been stable for many years.

Microsoft has stated that it is actively working on a solution and intends to roll out a subsequent update to rectify these issues. In many scenarios, reentering the BitLocker recovery keys might restore access to the desktop; however, Microsoft cautions users about the importance of having those keys on hand at all times.

“Microsoft Support cannot recover, provide, or recreate a lost BitLocker recovery key, ” the company emphasized, underscoring the critical nature of keeping this information accessible.

Steps to Take When You Lack BitLocker Keys After KB5058379 Locks Your PC

If your PC fails to boot and you don’t currently have access to your BitLocker recovery key, consider temporarily disabling Intel’s TXT feature. Here’s how:

Reboot your PC and enter the BIOS/UEFI settings. The key to access BIOS varies by manufacturer, but it’s often F2, F10, F12, or Esc, pressed during starting up.
Once in the BIOS menu, navigate to locate the Intel TXT option, which is typically found under Security > Virtualization or Advanced CPU Settings. Search for Intel TXT or Trusted Execution (it may also be marked as OS Kernel DMA Support).
Disable Intel TXT while keeping VT-d or VT for Direct I/O active, which should not interfere with the system boot process.
Save your changes and restart your computer.

After following the steps above, Windows should now boot successfully, allowing you to bypass the BSOD or the BitLocker Recovery screen. These instructions are especially handy for those without immediate access to their BitLocker recovery keys. Once you do have the key, you can use it to unlock your device and restore normal operations.

According to recent observations, the Windows 10 KB5058379 BitLocker issues mainly affect systems running Windows 10 22H2 or 21H2 LTSC/Enterprise with Intel vPro-class processors that have TXT enabled. Given that TXT works in conjunction with BitLocker, any update impacting core boot files may cause BitLocker to believe the hardware has been altered, thus prompting for the recovery key.

Some users have reported sporadic similar issues following the May 2025 Update on Windows 11, though such occurrences seem to be minimal.

Source & Images