I'm not sure if this question is a real duplicate of this
My laptop runs BitLocker without TPM but using a USB token to insert at every boot.
I've got that pen drive stolen...
I would like BitLocker to change its encryption key, exactly when yu revoke and reissue a compromised private key in a PKI. The other question I saw dealt with the recovery key.
I have successfully paused BitLocker for the moment after booting with the recovery key, so I won't have to type it again. I doubt that the guys that hit my face hard for my pocket will come after my laptop, but it's a good security practice to replace "compromised" no matter what.
Any ideas on making the old key useless and using a new one?
Possible answer: fully decrypt and fully re-encrypt. Patience...