Yay #Bitlocker. Working on a laptop for my mother-in-law because she had been compromised by some tech support scammers. I took a Clonezilla backup of the drive then temporarily disabled secure boot so I could boot a live recovery media to back up her personal files. Found out it's Bitlocker protected. No biggie, I'll just reboot it without network access and use an external drive. Rebooted, re-enabled Secure Boot, aaaannnd Bitlocker now demands a recovery key before it'll boot.