Key points
- Recovery media is created from a USB key, an SSD, or an external drive.
- At most three active media can be registered; revoke one to free a slot. R3 preserves registrations and supports migration of legacy data.
- While locked, registered, valid media already present or newly inserted makes Recovery available. Explicitly choose the method: the PC validates its proof against the required level, with no automatic unlock on insertion.
- Absence or removal makes Recovery unavailable; reinsertion makes it available. Valid media that remains present is reusable, with no required unplugging between authentications.
- The password remains available as a fallback method in every case.