It's password only, non tpm and it still creates a recovery key. Why tho?

linux doesn't do that when using LUKS encryption. trust me I'd love to switch, but can't.

you are viewing a single comment's thread
view the rest of the comments

Not 100% sure but in my previous use cases in work atmospheres bitlocker recovery keys we would auto collect/store in Active Roles/active directory. So if windows did an update and messed up something or a user forgot their password to get passed it we could search ARS/AD and get the machine back up and running.

  • source