Hello! I'm in need of urgent help! How do I encrypt the C: with Bitlocker and a PIN (preferably a combination of letters and numbers)? I've set the "Require additional authentication" and "Allow enchanced PINs for startup" under "Administrative Templates -> Windows Components -> BitLocker Drive Encryption -> Operating System Drives" as "Enabled". But Windows still just encrypts as normally, without any PINs. Thank you for reading! I hope you can help me!

HI IKT-kr, Thanks for the post! It seems you wanto turn on BitLocker Drive Encryption with a TPM plus a PIN. You should follow the steps: 1. Open the Group Policy Editor, navigate to: Local Computer Policy\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives 2. On the right pane, double-click Require additional authentication at startup, then click Enabled and set "Configure TPM startup Pin" to "Require startup PIN with TPM" 3. To set the actual PIN using a CMD prompt, input the command: manage-bde -protectors -add c: -TPMAndPIN Regards, MiyaThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi there, we were successful in encrypting the system drive with bitlocker, also the PIN is requested at startup. But we also have drive D (second partition) as a data drive. As soon as we want to activate Bitlocker on this drive D it says Group Policy .. are in conflict with startup options...something like that. Any ideas? Thanks in advance