Beware of Bitlocker

[jglathe]

Just as I'm grinding through the tests with a WDK, I was sooo reminded of the dangers of the default security settings. I acquired the box via ebay, as it appears to be out of stock. It came reset with the recovery image (or never even turned on, who knows) and none of the button tricks to go directly into UEFI BIOS, or boot from USB stick, worked. It always came up with the Windows 11 setup, also in 2160x1440 - as my first WDK did on initial power on. No choice but to go with the program, set it up, add MSA, create a PIN, do all the updates. Then, reboot to UEFI settings.
What you should do before you do UEFI changes: Decrypt your Windows drive if you intend on using it afterwards.
If you don't and end up needing to enter the Bitlocker key, don't use the first screen, press <Esc> first. This boots up another Bitlocker Key Recovery screen, this one actually works. After successfully entering the key it confirms and demands a reboot.

Another thing to remember: Zero-Touch UEFI needs to be off, otherwise all changes you do are moot (what? anyway). Also, if you want to boot the USB stick with grub, disable Secure Boot.