Bitlocker isuse after windows 10 update

Question

Hi Friends

I Wish immediate Safety and Well being of you , your families and community in large . Stay Safe Take care
I need your expert help in solving a critical case details of which are as following-

I got Thinkpad T490 laptop from one of my customer,
It was having windows 10 Enterprise X64 preinstalled . After windows updates last week suddently Bitlocker has started apprearing and is asking to enter the key.

As per customer he was not aware of what is Bitlocker so he has not activated it manually.
He is not having microsoft account so no backup of keys is present.
Manage-bde shows TPM+ Numeric key as protectors. Due to some reason windows is not fetching password from TPM.
Recovery Key ID is - 632A9B3C-0470-4AEC-8618-FABC6C91DB85 -- can we guess something from this ID ?
Bitlocker mentions that -
" Bitlocker needs your Recovery key to unlock your drive because "Secure Boot " has been disabled. Either Secure Boot must be re -enabled or Bitlocker must be suspended.

I tried to enable Secure Boot from thinkpad Bios but it was already enabled (UEFI only with CSM =No settings). I can't modify this settings except enable /disable Secure boot.
I tried to load bios defaults but its of no use.
There are many reasons for bitlocker provocation some very simple like change of keyboard type /firmware upgrade etc.
What should I do now ? Has someone experienced same scenario earlier ?
Contacting microsoft tech support they say its reponsibility of Lenovo since its OEM windows.
While Lenovo tech support says its microsoft product and you must take support from them.
So both of them are not going to help.
Pls. help me since I have exhausted all options and can't do anything further.
Here is attachment download link - (can't attach unfortunately)
https://drive.google.com/file/d/1uXvAVYprh6lOLLJvpl2JdTIJSgY93cjL/view?usp=sharingely)