May 13 -KB5058379 Windows 10 leads to corruption and endpoints asking for bitlocker key,.- Any known issues?

(This is my problem - the update fails & a loop of restarts & the computer is unstable while it does this. There is a know issue with certain computers including Dell, which I have, with Intel processor which causes problems.)

May 19, 2025—KB5061768 (OS Builds 19044.5856 and 19045.5856) This Out-of-band update is supposed to rectify BitLocker problems, but also the known issue on devices with Intel Trusted Execution Technology (TXT) enabled on 10th generation or later Intel vPro processors. You can get it at the Microsoft Update Catalog & make sure you choose the update that is relevant to your OS system. Am going to try it today. I presume then you can update the problematic update KB5058379.

** I tried this update from the Microsoft Update Catalogue today & after a while it Initialised Installation, then was installing it, then said after a while this update KB5061768 was NOT installed...

The manual update does fix the issue. I've installed it on 3 devices with good luck on all 3.

Microsoft has a new OOB update in Intune 05/16/2025 - 2025.05 OOB SecurityUpdate for Windows 10 and later.

I've deployed this, but it doesn't seem to update any of my test devices. I have an open ticket with Microsoft. Waiting on a response.

I responded earlier but figured it out. The update you mentioned, I put it in the Microsoft Catalogue Search Bar and used it to update my system. No issues whatsoever and it got rid of the problematic pending update.

I have an HP Pavillon Windows 10 2H22 X64 bit processing, if this is of any help.

I don't know if it will stop it if you already had the update installed but it's worth a try.

When you go onto the Catalogue and see the possible downloads, don't press download. Press the name of the update for the right system you're using, then look at package details and it shows the replacement. Copy the KB number for the replacement and then paste it into the Catalogue search in the right hand corner of the page and look for the one that corresponds to your computer and download it. It should do a normal and (at least for mine it was quick) update and start up without it prompting to update to the bad update.

(I realize you're in IT but I figured I would go into detail for other people.)

Thank you very much for you reply and helpful info.

Respectfully,

In our environment KB5061768 OOB update did resolve the problem on devices that were being hit by Bitlocker (plus one that went thought the BSOD loop). I was hearing they put the update in an OOB option through Intune as well, though when we tried to configure it to push out to devices, we never saw it go through. Ultimately, we just wrapped it as a win32app and pushed out our device model groups that were still operating on Windows 10 to get it deployed.

I have a call scheduled with MS this afternoon to discuss this. I rolled the OOB update out on Tuesday to 13 devices and none have gotten it.

Weird that they openly state on one page that the update will not be released as part of a Windows Update, but then have the option available in Intune.

I do know the Expedite Policy doesn't seem to do a thing in my environment. I have 83 devices now with the bitlocker window popping up. I still have Windows 10 updates paused for most of our company. Windows 11 is working fine.