Environment
Dell Latitude running Windows 11 Pro with TPM 2.0 and BitLocker enabled.
What happens
Every firmware update boots into the BitLocker recovery screen even though Secure Boot remains enabled.
What I have tried
Re-entered the recovery key and confirmed TPM health in Windows Security.
I would appreciate advice on how to identify the root cause without risking existing data or configuration.
Verified community troubleshooting
This looks less like a hardware failure and more like a configuration issue.
Likely cause: Firmware updates change TPM platform measurements while BitLocker protection is active.
What I would try: Suspend BitLocker before applying approved BIOS updates, reboot once after the update and then resume protection.
Keep an eye on the relevant logs during the test; they should confirm whether the hypothesis is correct.
Good point about changing one thing at a time. I had been testing several settings together.