If protection is "On" without a key, BitLocker recovery is required.