Surface Pro Bitlocker

[Protech]

Hi Guys,

I got a case of a Surface Pro that failed to boot. Tried to reset it as well as every other advice on the Microsoft website including a recovery USB, it didn't budge. I decided to take out the SSD and connect it to a PC using a PCI card since i don't a the PC3K SSD. The drive shows up as locked on windows as expected. the problem is it only asks for a recovery key. The client provided the Password which i used to enter using the command prompt, it says "Password failed to unlock the volume". Is there any tool that will let me enter the Password or am I outta luck? Any clue will be much appreciated.

Thanks

[ddrecovery]

You do need the recovery key.

[Protech]

You do need the recovery key.

Thats what some would call S*** outta luck. Thank you

[DRUG]

Failed to boot. Why?
If client has no key that's what needs to be solved.

[Protech]

Failed to boot. Why?
If client has no key that's what needs to be solved.

My guess would be the OS. Client has the password but not the 48digit recovery key.

[Cleanroom]

Tell them to check their one drive account. Most of our surface pro recoveries have been found in there.

https://support.microsoft.com/en-us/win ... 6f5ab347d6

[ddrecovery]

Tell them to check their one drive account. Most of our surface pro recoveries have been found in there.
https://support.microsoft.com/en-us/win ... 6f5ab347d6

We have also found them in MSO accounts as well. You need to check everywhere.

[Protech]

Tell them to check their one drive account. Most of our surface pro recoveries have been found in there.

https://support.microsoft.com/en-us/win ... 6f5ab347d6

The client doesn't have neither a one drive nor any Microsoft account. Wasn't even aware that the bitlocker was active. I get these cases every now and then. My hope was to find a way in using the password.

Thanks

[DRUG]

Tell them to check their one drive account. Most of our surface pro recoveries have been found in there.

https://support.microsoft.com/en-us/win ... 6f5ab347d6

The client doesn't have neither a one drive nor any Microsoft account. Wasn't even aware that the bitlocker was active. I get these cases every now and then. My hope was to find a way in using the password.

Thanks

Was he on a active directory?

There is a way for LE to get partial access (knowing what account stored that specific recovery key) but Microsoft needs to provide some Intel.

[Protech]

Tell them to check their one drive account. Most of our surface pro recoveries have been found in there.

https://support.microsoft.com/en-us/win ... 6f5ab347d6

The client doesn't have neither a one drive nor any Microsoft account. Wasn't even aware that the bitlocker was active. I get these cases every now and then. My hope was to find a way in using the password.

Thanks

Was he on a active directory?

There is a way for LE to get partial access (knowing what account stored that specific recovery key) but Microsoft needs to provide some Intel.

Apologies for the late reply. No he wasn't in any active directory and he can't provide any useful info at this point. I'm running out of ideas here

[labtech]

Is TPM enabled in BIOS? They key may reside in TPM and the machine pulls they key from there to authenticate.