Source: https://technet.microsoft.com/de-de/library/ee424299(v=ws.10).aspx
In admin PowerShell:
manage-bde -protectors -delete C: -Type TPMAndPIN manage-bde -protectors -add C: -TPM