====== Bitlocker system encryption for Windows ======

//Source: [[https://technet.microsoft.com/de-de/library/ee424299(v=ws.10).aspx]]//

  * [[https://www.howtogeek.com/howto/6229/how-to-use-bitlocker-on-drives-without-tpm/|Use Bitlocker without a TPM]]
  * [[https://docs.microsoft.com/en-us/powershell/module/bitlocker/enable-bitlockerautounlock?view=windowsserver2019-ps|Enable Auto Unlock]]

===== remove PIN on startup =====
In admin [[admin:windows:powershell|PowerShell]]:

<code powershell>
manage-bde -protectors -delete C: -Type TPMAndPIN
manage-bde -protectors -add C: -TPM
</code>