Windows will prompt you to back up your BitLocker recovery key and suspend encryption before updating the BIOS for your own safety.

If you want to store BitLocker Recovery Keys in Active Directory, configure GPO & enable BitLocker. Follow the steps mentioned here to do the same.

If you set up Windows 11 normally with a Microsoft account, your BitLocker recovery keys will automatically be backed up to your Microsoft account, which is frankly, the best way to do it.

From tracking a lost laptop and restoring settings to managing device access and saving BitLocker recovery keys, the Microsoft account dashboard offers several tools that many users overlook.

Microsoft has released out-of-band updates to fix a known issue causing Windows 10 systems to boot into BitLocker recovery after installing the May 2025 security updates.