When BitLocker is activated, the system generates a Recovery Key. This Recovery Key is used to encrypt a copy of the VMK. This "protected" VMK is stored in the metadata of the disk.

A "proper" BitLocker implementation will trigger recovery mode under specific security scenarios. It is not an error; it is a security response to a detected change.