I was quite shocked today to see that a Windows 10 Pro machine that I recently set up with BitLocker (startup PIN + TPM with full disk encryption) suddenly didn't have BitLocker enabled anymore:
And apparently Windows messed with my Bitlocker settings:
So Windows must have changed them soemhow.
I have not messed with the registry or installed tools that would do so. I haven't even installed any third party AV software as I only visit websites that you would consider trustworthy (like google.com, youtube.com, amazon.com etc) and only install software that you'd consider trustworthy (like Firefox, Skype etc)... I suspect Windows Update to be the source of the problem. And as it turns out other people have reported similar issues with Windows Update suspending their BitLocker.
This is absolutely unacceptable in my opinion! As I use a startup PIN + TPM, there doesn't seem to be an obvious way to prevent this from happening again.
Is there a way I can prevent this? I really don't want to disable Windows Update as I won't get security updates anymore then. And I also don't like the idea of manually installing updates once a week and then afterwards checking if BitLocker is enabled again.