Windows BitLocker

Jump to bottom

Alexander Frank edited this page Jul 1, 2020 · 1 revision

Adding a PIN on startup for computers with TPM

Enable encryption
Follow the steps on this website
Open group policies with STRG + R -> gpedit.msc
Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives
Activate this policiy and set Require startup PIN with TPM

Useful commands:

manage-bde -status
manage-bde -protectors -add c: -TPMAndPIN
manage-bde -changepin c: