KB 5012170 (or: another Secure Boot DBX patch)

Topic

Hello, what do you think? Is KB5012170 safe to install, or  are we facing another problematic KB4535680 Secure Boot DBX patch?

Frangar non flectar

Replies

On my Windows 10 Pro Dell XPS Desktop machine, it was not a problem for me. I installed it 8 days ago.

1 user thanked author for this post.

HanJohnJo

Hi HanJohnJo

Please see the 16-Aug-2022 BleepingComputer article Windows KB5012170 Update Causing BitLocker Recovery Screens, Boot Issues and Susan Bradley’s 30-Aug-202 comments about KB5012170 in Master Patch List for August 30, 2022.

I have a Win 10 Pro v21H2 computer and Control Panel | System and Security | BitLocker Drive Encryption shows that BitLocker is turned OFF on my system so installation of KB5012170 did not cause any problems for me. However, if BitLocker is enabled on your system and you are not able to access you 48-digit Bitlocker recovery key after KB5012170 is installed you could be in serious trouble – see See ecarpenter’s 11-Aug-2022 Inspiron 7391 BIOS Update Enabled Bitlocker and Eric Koch’s 28-Aug-2022 Windows PIN Unavailable / BitLocker Asking for Recovery Key in the Dell forum for just a few examples.
———-
Dell Inspiron 5584 * 64-bit Win 10 Pro v21H2 build 19044.1889 * Firefox v104.0.1 * Microsoft Defender v4.18.2205.7-1.1.19500.2 * Malwarebytes Premium v4.5.14.210-1.0.1751 * Macrium Reflect Free v8.0.6867

2 users thanked author for this post.

HanJohnJo, PKCano

I’ve got it hidden with wushowhide – for the time being at least. I can always install it later, or if MS plan to reissue it I will perhaps get it then.

1 user thanked author for this post.

HanJohnJo

I don’t think I have seen it explicitly stated that if Bitlocker is ‘Off’ (as it is on my Win10 Pro desktop) I should go ahead and install KB5012170.

It has sort of been left hanging at don’t install that update if Bitlocker is On, or turn Off Bitlocker before installing it (being aware that your data will be decrypted).

Since Bitlocker is Off for me should I go ahead and install KB5012170 or should I hide it for now?

Thanks!

1 user thanked author for this post.

HanJohnJo

I’ve installed it on about 15 Win10 and 5 Win11  systems, all with bitlocker off, and haven’t experienced any issues.

2 users thanked author for this post.

HanJohnJo, opti1

If bitlocker is off, it’s okay to install.

If bitlocker is off and it still throws off an error and won’t install, hide it.

If bitlocker is on, hide it.

If you are a goverment or business mandated to patch, ensure you have recovery options/know where your bitlocker recovery key is.

Susan Bradley Patch Lady/Prudent patcher

4 users thanked author for this post.

HanJohnJo, Coldheart9020, opti1, lmacri

Is it safe to install KB 5012170 if your running Windows 10 Home 64 bit (version 21H1) since there is no Bitlocker installed.

Thank you.

1 user thanked author for this post.

HanJohnJo

Yes.

Susan Bradley Patch Lady/Prudent patcher

the KB5012170 update automatically downloaded & installed on my dad’s Toshiba Satellite C55Dt-A 2013 laptop running Win10 Home x64 21H2 (noticed I said Win10 Home, not Win10 Pro) without my intervention almost two weeks ago and did not find any problems with it. though it required a reboot for KB5012170 to take full effect as the Toshiba laptop has UEFI & secure boot turned on (and no TPM).

edit – I’ll have to test this on another system but running Win8.1 Core/Home and will download & install the Win8.1 version of KB5012170 myself and see how that goes

1 user thanked author for this post.

HanJohnJo

Hi EP

as I’m running under 8.1 pro X64 I’ll be very grateful if you will share the outcome of installing KB5012170 under that system.

Thanks!

Frangar non flectar

I have installed this update in W8.1 on a Ryzen 2700X machine (B450 Motherboard) and a i5 9500 (B360 Motherboard) machine, both with Bitlocker off and have not had any problems with it.

Resolved, thank you.

Frangar non flectar