This pattern usually means BitLocker is entering recovery at startup, then Windows loads normally after the recovery key is entered. On Surface devices, this can happen when BitLocker detects a change in boot, TPM, or security configuration.
If Windows does open after entering the key, try this:
- Open Control Panel > BitLocker Drive Encryption.
- Next to the system drive, select Suspend protection.
- Restart the Surface once normally.
- Go back to BitLocker Drive Encryption and select Resume protection.
If the device stops at recovery or gets stuck in a boot loop, use these steps:
- Turn off the device and try to boot again.
- After two failed boot attempts, it should enter the Windows Recovery Environment (WinRE).
- Go to Troubleshoot > Advanced options > Command Prompt.
- If prompted, enter the BitLocker recovery key.
- Run these commands:
-
bootrec /scanos
-
bootrec /rebuildbcd
-
bootrec /fixmbr
-
bootrec /fixboot
If Windows still does not start, use a Surface USB recovery drive. Note: this can reinstall Windows and may delete personal files, reset settings, and remove installed apps.
- Insert the USB recovery drive.
- Press and hold volume-down while pressing and releasing power.
- When the Surface logo appears, release volume-down.
If none of that resolves it, use Surface service or repair options.
References: