Updated May 20 with details on how Microsoft has now corrected the buckt and what you need to do.
Windows 10 users recently encountered a problem caused by the latest Windows 10 KB5058379 update. The problem is that it is a compulsory update. Now Microsoft has published a critical update to put things back. All the details of what you need to do at the end of this post.
Windows 10
First, a story. The problem was reported on May 15 by Windows. “Windows 10 kB5058379 forces PCs to start in Windows Recovery and requires a Bitlocker key. The latest reports received from Windows that KB5058379 begins, but end up” enter the recovery key to start again.
It is unusual for the recovery of Bitlocker to trigger automatically, unless we modify the material or organic parameters. Several users told Windows last that a Bitlocker recovery (Windows Boot Recovery) is automatically invited after the installation of KB5058379, which takes place via Windows Update. In some cases, there is also a BSOD… Windows 10 KB5058379 is a compulsory security update for everyone, including companies or businesses, and you have no choice but to install the update, “he continued.
If you are not familiar with Bitlocker, then, as you will see below, there is a chance that the problem does not apply to you. Anyway, here’s how Bleeping Computer described the problem and how it manfits.
“The Bitlocker Windows security function is storage players to prevent data theft, and Windows computers generally enter Bitlocker recovery mode after events such as TPM (Confidence platform module) or material modifications to regain access to protected readers. Today, Microsoft confirmed the problem and said On reports according to which a small number ‘of Windows 10 PC displayed Bitlocker screens after installed the KB5058379.
On Saturday May 17, Microsoft updated an assistance document to recognize the problem. “We are aware of a known problem on devices with Intel Trust Execution Technology (TXT) activated on the 10th generation or the subsequent Intel VPro processors,” he said. He also shared good news.
This will probably not affect you
“General public devices generally do not use Intel VPro processors and are less likely to be affected by this problem. This problem only applies to the platforms assigned below.
Again, that’s why you probably know Bitlocker if there is a chance that you can be assigned.
So, if you have a PC with an Intel VPro chip, you might be tempted not to install it yet, but as it is compulsory, it is not advisable to jump it.
Take heart, however: Microsoft works on it. “We are working urgently on a resolution for this problem, with plans to publish an out-of-band update to the Microsoft update catalog in the coming days,” he said, and the fact that the last assistance document was filed on a Saturday indicates the urgency.
What to do
The first step, of course, is to find your 48 -digit Bitlocker recovery key. Here are the useful instructions of Windows Latest for what you need to do.
You must restart in Bios / UEFI, which can be done by pressing a key after feeding, but the keys are different in all OEMs. On most Dell / HP / Lenovo: Press F2, F10 / F12 or ESC immediately after switching on Bios / UEFI.
Then, in the BIOS, search for safety, open virtualization or advanced CPU parameters and deactivate Intel TXT. This could also be called confidence execution or DMA support of the bone nucleus. Note that you can leave VT for direct (or VT-D) E / S activated. Finally, save the modifications and leave the BIOS.
“The idea is to deactivate Intel TXT / a confidence execution and allow KB5058379 to finish the installation. If you have followed the steps correctly, you will not meet Bitlocker Recovery or BSOD. Remember that the BSOD or Bitlocker will not be triggered when installing KB5058379, but you will not have the problem after update. In the BIOS, ”explains Windows Derniter.
Windows 11 is not affected by this problem, it seems.
The corrective
So what about this update to repair things? Microsoft said it worked urgently and would publish an update in days. He did it, only 48 hours after recognizing the defect.
On Monday, May 19, Microsoft said he had solved the problem. “We are aware of a known problem on devices with Intel Trust Execution Technology (TXT) technology in 10th generation or Intel VPro Intel processors. Automatic repair, ”he said.
He then described the resolution, with an update which is only available for download via the Microsoft update catalog, so this is the place where you need to visit to sort.
“This problem has been resolved in the out -of -band update (OOB) KB5061768, which is only available via the Microsoft update catalog. If your organization uses affected platforms and has not yet deployed on May 13, 2025, Windows Security Update, or if KB5058379 failed to install, we recommend that you apply this OOB update instead, “he said.
If you have already installed updates and you cannot start your PC, you must deactivate Intel VT for direct E / S (also known as VTD or VTX) and Intel Trust Execution Technology (TXT) in your BIOS / UEFI settings. This deactivation should only be temporary. You will have to enter your Bitlocker touch. If you don’t have it, see the instructions to recover the key.
Once you have done this, go to the Microsoft update catalog and install the new update, KB5061768.
Then restart the windows and return to your BIOS / UEFI settings. This is when you reactivate Intel VT for direct E / S (also known as VTD or VTX) and TXT. (Note that you will again need your Bitlocker recovery key for this step.
