Bitlocker and TPM blocks the hard disk after booting from USB and pressing "Try Ubuntu"?

[wgarcia]

@tea-for-one

@wgarcia Is this the thread , which generated post no.1?

Yes, that’s where it started.

[ogra]

Did anyone who can reproduce it file a bug yet ?

Discussing the issue and finding workaround (or write tutorials to help users) might be all fine but that will not solve the cause of the issue nor will it bring it to the attention of developers who can potentially fix it …

So if someone here can reproduce it, it would be nice to open a bug, attach logs etc so the system can be fixed in way the issue does not occur anymore …

[wgarcia]

@ogra the problem is that maybe it’s not a bug at all. As I said a couple of messages ago, it’s just triggered before anything related to Ubuntu has anything to do with the computer. Once Subiquity stars running, the disk is already blocked by Bitlocker.

[ogra]

Well, a bug doesn’t necessarily mean there is a flaw in the code

It could mean fixes to documentation or showing a pop-up like “If you changed the boot order in your UEFI Windows might now require a bitlocker key to boot it again”, filing it to make developers or documenters aware is the first step to take though, else it will not be looked at (perhaps there is something you can do in code to prevent the whole thing, who knows…)

[wgarcia]

This new piece in the documentation talks at the end about the issues that we discussed in this thread:

Hardware-backed encryption and recovery keys in Ubuntu Desktop

Hardware-backed encryption is a feature that lets you encrypt your computer’s drive with keys that are automatically generated and stored in the computer’s Trusted Platform Module (TPM). You should always store a recovery key for your encrypted drive somewhere safe to avoid losing access to all your data. Why you need a recovery key Hardware-backed encryption is a convenient way to keep your data secure. Usually, you only need to enter your Ubuntu user password to get access to your data, unle…

[jmj]

Just a +1 at this point.
However, I have not been able to recover my ThinkPad at this point. I can mount the OS drive with the recovery tools (using the recovery key).
But booting hangs, I’m just getting a blank blue screen (not the BSOD).
I suspect it’s asking for the recovery key, but there isn’t any text. My other guess is that it’s hung up trying to access the TPM.

Well… just typed the recovery key in the blind on the blue screen, no dashes with enter at the end. And it booted.