BitLocker error 0x80210002: transient state fix

Quick answer

Run this in an admin command prompt: manage-bde -protectors -disable C: then manage-bde -protectors -enable C:. If that's too techy, just restart your PC. That clears the transient state 90% of the time.

Why this happens

You see error 0x80210002 when BitLocker can't read the encryption keys on your drive. The drive is in a transient state—that's Microsoft's fancy way of saying it's caught between two modes. Maybe you just rebooted after a crash. Or you ran a disk check that left things half-done. Or the TPM chip (that little security chip on your motherboard) got confused and refused to hand over the keys. This error shows up a lot on Windows 10 and 11 laptops after a forced shutdown—like when the battery dies while BitLocker is doing its thing. The good news: it's almost never a hardware failure. It's just the software being a bit dumb.

Fix steps

Step 1: Restart the computer

I know, it sounds stupid simple. But do it first. Here's why: the transient state often clears after a clean boot. Click the Start button, pick Power, then Restart. Wait for Windows to load fully. Then try unlocking the drive again. If you don't get the error anymore, you're done. If not, move to Step 2.

Step 2: Suspend and resume BitLocker protection

This is the real fix. You'll temporarily turn off BitLocker protection, which forces the system to reset the transient state. Then you turn it back on. Your data stays encrypted the whole time—it's just the key management that resets.

1. Press the Windows key, type cmd, right-click Command Prompt, and pick Run as administrator. You'll see a User Account Control popup—click Yes.
2. Type this command and press Enter:
   

   manage-bde -protectors -disable C:

   Replace C: with the drive letter that's stuck (like D: or E:). You should see a message saying protectors were disabled successfully.
3. Now type this and press Enter:
   

   manage-bde -protectors -enable C:

   Same drive letter. You'll get a success message.
4. Close the command prompt. Try accessing the drive through File Explorer. It should work now—no more error.

Expected outcome: After the enable command, BitLocker re-creates the encryption keys. That clears the transient state. You might see a brief hang while it does that—that's normal.

Step 3: Use the BitLocker recovery key

If suspend/resume didn't work, you need to unlock the drive manually with the recovery key. You saved this key when you first set up BitLocker—it's either printed, saved to a file, or stored in your Microsoft account.

1. On the BitLocker error screen, click Enter recovery key.
2. Find your key. If you saved it to your Microsoft account, go to https://account.microsoft.com/devices/recoverykey and sign in. Look for the key that matches the Key ID shown on the error screen.
3. Type the 48-digit key (dashes included) and press Enter. The drive unlocks.
4. Once unlocked, open an admin command prompt and run manage-bde -protectors -enable C: to fix the transient state permanently.

Alternative fixes if the main one fails

Check the TPM

If restarting and suspend/resume both fail, the TPM might be the problem. On some Dell and Lenovo laptops, a BIOS update or a TPM firmware update can cause this. Here's what to do:

1. Press Win + R, type tpm.msc, and hit Enter. The TPM Management window opens.
2. Look at the Status: It should say "The TPM is ready for use." If it says anything else—like "The TPM is not detected"—you have a hardware or BIOS issue.
3. If the TPM is ready but the error persists, clear the TPM (this erases all keys, so have your BitLocker recovery key handy). In the same window, click Actions > Clear TPM. Restart the PC, and set BitLocker up again from scratch.

Run a disk check

A corrupted file system can mimic a transient state. Open an admin command prompt and run:

chkdsk C: /f

You'll see a message asking to schedule the check at next restart. Type Y and press Enter. Restart the PC. Chkdsk runs before Windows loads—it might take 10-15 minutes. After it finishes, try the suspend/resume commands again.

Prevention tip

Don't force-shut down your PC while BitLocker is encrypting or decrypting a drive. That's the #1 cause of this error. Also, keep your BitLocker recovery key in two places—one digital (like a PDF on a USB stick) and one printed. If the TPM acts up, that key is your only way in. And update your BIOS and TPM firmware annually—manufacturers push fixes for these exact transient state bugs.