Microsoft Model 1866 do not install Fortect- Bitlocker blocks Surface Laptop

Sergio Nuno ARRAYAN-Robinson Helicopter in Chile 0 Reputation points
2026-06-30T01:56:26.6766667+00:00

I Installed Fortect and when restarting, Microsoft 1866 Surface Laptop asked for Bitlocker Key which I obtained and entered docens of times and always appeared: THE DEVICE HAD A PROBLEM AND COULD NOT BE REPAIRED Tried everything for two days without leaving my desk. Nothing happened, not even re installing Windows. Always the same message THE DEVICE HAD A PROBLEM AND COULD NOT BE REPAIRED. Need help, and do not even consider getting close to Fortect.

Surface | Surface Laptop | Performance and maintenance
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Lychee-Ng 22,840 Reputation points Microsoft External Staff Moderator
    2026-07-01T13:45:11.2933333+00:00

    Hi Sergio Nuno ARRAYAN-Robinson Helicopter in Chile,

    I’m very sorry to hear you’re dealing with this. I recently faced a similar situation with my Dell laptop (I even stayed up until 5 in the morning attempting to fix it, but all efforts were in vain), so I completely understand how exhausting this must feel for you. Just wondering, have you tried the steps suggested in the AI answer, and what's the results? 

    From your description, it seems that the BitLocker recovery key was accepted, but the repair still failed. That points to possible system corruption or damage beyond BitLocker or any software itself. From my own experience, before proceeding with any repair option, I strongly recommend backing up your files first if possible: 

    • Download a Surface Recovery Image for your device and create a bootable USB drive.
    • Plug the USB to the Surface > hold volume-down + press power buttons to boot into it 
    • When logo appears, release button > Troubleshoot > Advanced options > Command Prompt
      • If the drive is still locked, unlock it using your BitLocker recovery key
      • Connect an external drive > type notepad and press Enter
    • Click File > Open > browse the drive and copy important files to the external drive.

    If your files are safely backed up or you don't have anything you want to save, use that same bootable USB to clean install. Instead of going to Command Prompt, choose Recover from a drive then Fully clean the drive. Refer to Creating and using a USB recovery drive for Surface - Microsoft Support and follow the instructions in the article.

    In case that even a clean install fails and the same error persists, the issue may have progressed beyond something users like us can fix. In my case, I had to take my laptop to a professional, and in the end, they had to replace my main hard drive for the laptop to work again. For a Surface device, you can request additional diagnostics or service from Microsoft: 

    Given that Surface Model 1866 was released a few years ago, a hardware issue is a totally possible scenario. However, this also means the device is likely out of warranty, so service may come at a cost. I’d recommend weighing all options carefully before proceeding down that path.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". 

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-06-30T01:56:46.4366667+00:00

    The behavior is consistent with a BitLocker/TPM issue after a change to the system (installation of Fortect and subsequent reboot). The key is accepted, but Windows cannot start and reports that the device cannot be repaired. On Surface devices this can happen when BitLocker is bound to non‑default TPM PCR values or Secure Boot/firmware state has changed.

    Use the following recovery path from the BitLocker known‑issues guidance for Surface:

    1. Obtain the BitLocker recovery password
      If not already done, confirm the recovery key from the Microsoft account used on the device:
      https://account.microsoft.com/devices/recoverykey
      If BitLocker is managed by MBAM, Configuration Manager BitLocker Management, or Intune, contact the administrator.
    2. Create a Surface USB recovery drive
      On another computer, download the Surface recovery image from Surface Recovery Image Download and create a USB recovery drive.
    3. Boot the Surface Laptop from the USB recovery drive
      • Insert the USB recovery drive.
      • Start the Surface Laptop.
      • When prompted, choose language and keyboard layout.
      • Select Troubleshoot > Advanced options > Command Prompt.
    4. Unlock the BitLocker‑protected OS drive and disable TPM protectors
      In the Command Prompt (from the recovery environment), run: 
         manage-bde.exe -unlock -recoverypassword <Password> <DriveLetter>:
   manage-bde.exe -protectors -disable <DriveLetter>:
      where:
      • <Password> is the BitLocker recovery password obtained in step 1.
      • <DriveLetter> is the drive letter assigned to the OS drive in WinRE.
      This removes the TPM protectors from the boot drive so the device can start.
    5. Restart and sign in
      Restart the Surface Laptop and, when prompted, enter the BitLocker recovery password again. With TPM protectors disabled, Windows should be able to start.
    6. (Optional) Backup data and reset if Windows still cannot start
      If Windows still does not start, use Surface BMR to recover data and reset:
      • Boot again to the USB recovery drive and open Command Prompt.
      • Unlock the drive: 
             manage-bde.exe -unlock -recoverypassword <Password> <DriveLetter>:
      • Use copy or xcopy.exe to copy user data to another drive.
      • Then follow the instructions in Creating and using a USB recovery drive for Surface to reset the device.
    7. Re‑enable BitLocker after recovery
      Once Windows is working again and data is safe, re‑enable BitLocker:
      • Select Start, type Manage BitLocker, press Enter, and follow the steps to encrypt the drive.
    8. Restore default Secure Boot and PCR configuration (to prevent recurrence)
      On Surface devices, BitLocker should bind to PCR 7 and PCR 11 with Secure Boot correctly configured. a. Suspend BitLocker
      Open an elevated PowerShell window and run: 
         Suspend-BitLocker -MountPoint "<DriveLetter>:" -RebootCount 0
      b. Ensure Secure Boot is set to Microsoft Only
      • Restart and enter UEFI settings.
      • Set Secure Boot to Microsoft Only.
      • Restart and sign into Windows.
      c. Resume BitLocker
      In elevated PowerShell: 
         Resume-BitLocker -MountPoint "<DriveLetter>:"
      d. Reset PCR settings if Group Policy changed them
      • Disable any Group Policy Objects that configure TPM PCR settings or remove the device from groups enforcing such policies.
      • Suspend BitLocker again with Suspend-BitLocker as above, then resume after policies are corrected.

    If, after these steps, the device still cannot be repaired, the remaining option is to back up data (using manage-bde + copy/xcopy from recovery) and perform a full reset using the Surface recovery image.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.