Issue
The BitLocker recovery key can't be rotated.
Symptom
- Clicking Rotate on the Drive Encryption page results in a failure.
- The recovery key doesn't automatically rotate after use, even though it's configured in the policy settings.
- Issue column on the Drive Encryption page shows Trusted Platform Module is corrupted.
Cause
The endpoint's TPM is corrupted.
Resolution
Recover the TPM by following Microsoft's guidance in Troubleshoot the TPM
- Verify the TPM is enabled in the Unified Extensible Firmware Interface.
- Restore the TPM to factory settings.
- Clear all keys in the TPM.
Return to Drive Encryption guide.