It wasn't a firmware update, if bitlocker detects hardware or disk config changes - it needs to be unlocked from the enterprise side. Most deployments have a self service portal so you don't have to bother IT for it.

As for installing Linux, that should be fine as long as you're not pulling company data on that - and it should be gated with whatever endpoint protection there is for Linux.