I've learned in this answer that starting with Windows 10 v1607, Windows will not allow to set, save or change the TPM owner password by default. So the option to reset a TPM lockout by entering the owner password does not appear to exist anymore.
The alternative is to clear the TPM. The following scenario:
- BitLocker enabled with TPM + PIN
- wrong PIN entered >256 times over some time
- now TPM never allowes more than one PIN attempt before entering into lockout for several minutes
- during TPM lockout, recovery key can be used to access system
Is it safe to clear the TPM to reset the counter of wrong PIN attempts? Will the BitLocker encrypted data be lost? The warning screen sounds serious (below).
As mentioned, the recovery key is available. However, I want to avoid having to enter it every time I boot the computer.