For either mode, Microsoft "typically" backs up BitLocker keys to its servers when the service gets set up from an active ...