Forum Discussion
BitLocker suspended by recent hotpatch?
We appear to have seen BitLocker get suspended by an automated process this past month or so (since August 2026 Patch Tuesday or thereafter) and left that way. Has anyone else seen their estate do th...
Adding to Jamony's point that auto-suspended protection normally resumes at the next restart: with hotpatch, that's probably the whole story. Whatever suspends BitLocker is waiting for a reboot, and hotpatch is designed so that reboot may not come for weeks. It would also explain the device that went to recovery and was fine after another restart.
To stop it recurring while you test, an Intune Remediation works well as a safety net:
- Detection: ProtectionStatus is Off while the volume is fully encrypted and has key protectors (Get-BitLockerVolume -MountPoint C:).
- Remediation: Resume-BitLocker -MountPoint C: and write a log line.
- Run it daily on the hotpatch rings, so a suspended device is fixed within a day instead of reaching your 14-day non-compliance email.