Sorry for the late reply, I will try to answer all the questions.
We did and going back a few days. they said we would likely need to reinstall windows since there was no recovery key....which is fine as the laptop had minimal on the drives, mainly used for college using cloud and local canvas.
Yes
It was.
Small disclaimer, we have 3 Lenovo products and love them, we have nothing bad to say about them but this was just likely an oversight on our part.
Hopefully this will help others and answer some questions...long-winded backstory, we purchased from Lenovo new back in Aug '24, haven't had any issues. It was powered up 3 days ago and performed it's scheduled Windows updates, and we were greeted with the bitlocker screen. I have never seen this before, but we made no changes to the laptop, the laptop was recognized by the Microsoft account, matching serial #, but no recovery data, secure boot enabled, so we contacted Lenovo and they said we would likely need to reinstall Windows. The person we spoke with didn't say we needed to use THEIR download file so I did the normal media creation tool from Microsoft and it wouldn't load due to not meeting specs.
So Microsoft suggested to use Win 10 then upgrade after the install. Once running on Win 10, we had no internal Wi-Fi and had to use an adapter. Then we tried the Win 11 tool and upon initialization, we had the same result, does not meet specs. Finally on my 3rd call to Lenovo, I spoke with a very knowledgeable person and they walked me through their own re-install procedure which after they
"verified the laptop was ours" they sent us the Win 11 file that included all our drivers that were used to initially setup the laptop from the factory. Now it's up and running, still no recovery key in our Microsoft account but we have secure boot disabled for the time being and the bitlocker is off. Maybe during summer break we can try to secure it more as I will have it physically in front of me for a length of time
Yes, they said the TPM is a Microsoft issue but that was only one person who said that, maybe the hardware is Lenovo and the software is Microsoft?
We currently have secure boot off. It was turned on originally when this mess happened so for now we have it off. The Lenovo rep said to wait a few days after this last install to see if we have the recovery data in our Microsoft account, but I said we had secure boot on, and was 5 months and still no recovery key in our account so with college starting back up, I don't want to run into any issues until summer, then I can try again to add the TPM....this has been quite a show the last few days.
I get it that we need it enabled to see the key but maybe we missed a step before when we first set it up back in Aug?
To sum up this post, our Lenovo laptop seemed to want the "creation tool" from Lenovo and not Microsoft, once we had it, all went smooth.