If end users get locked out of Windows by BitLocker because they forgot their password or PIN, or because they changed operating system files or changed the BIOS or the Trusted Platform Module (TPM), they can use the Self-Service Portal to regain access to Windows without having to ask their Help Desk for assistance.
If the IT administrator configured an IIS Session State time-out, a message is displayed 60 seconds prior to the time-out.
These instructions are written for and from the perspective of end users.
To use the Self-Service Portal to regain access to a computer
In the Recovery KeyId field, enter a minimum of eight of the 32-digit BitLocker Key ID that is displayed on the BitLocker recovery screen of your computer.
If the first eight digits match multiple keys, a message displays that requires you to enter all 32 digits of the recovery key ID.
In the Reason field, select a reason for your request for the recovery key.
Click Get Key. Your BitLocker recovery key is displayed in the “Your BitLocker Recovery Key” field.
Enter the 48-digit code into the BitLocker recovery screen on your computer to regain access to the computer.