This video explains how to use BitLocker to encrypt a drive. A Trusted Platform Module and a compatible version of Windows are required. Before turning on BitLocker, the TPM must be enabled in the system BIOS and initialized using tmp.msc. To prompt for a PIN or USB key on startup, enable the policy "Require additional authentication at startup" in the Local Group Policy Editor. To turn on BitLocker, search for it in the Start menu and select "Turn on BitLocker". Choose a startup option and create a PIN. Save the recovery key and TPM owner password. Restart the computer and enter the PIN or insert the USB key if prompted. The encryption process may take a while.
Here's how to use BitLocker to encrypt your drive. You'll need a system with a Trusted Platform Module and a version of Windows that supports BitLocker. You may also need a USB flash drive. Before turning on BitLocker, enable your TPM in the system BIOS and initialize it using tmp.msc. For help doing this, search for "Enable TPM" on dell.com/supportvideo.
If you want BitLocker to prompt for a PIN or USB key on startup, search for "gpedit.msc" from the "Start" menu then press "Enter" to launch the Local Group Policy Editor. Under "Computer Configuration", expand "Administrative Templates", Windows Components, then "BitLocker Drive Encryption". Select "Operating System Drives". Then double-click "Require additional authentication at startup". Enable the policy. Then uncheck "Allow BitLocker without a compatible TPM" and click "OK".
Now, search for "BitLocker" from the "Start" menu. And select "BitLocker Drive Encryption". Click "Turn on BitLocker". If you enabled it in gpedit, you'll be asked to select a startup option. To start up normally, select "Use BitLocker without additional keys". To set a PIN that must be entered, select "Require a PIN at every startup". Or to create a USB flash drive that must be present, select "Require a Startup key at every startup".
We're going to create a PIN. Enter, then confirm your PIN. Save or print your recovery key. This key is not the same as the TPM owner password you may have saved earlier. Keep both your recovery key and TPM owner password safe. Losing either may lead to losing your data. Click "Continue" to run the system check and begin encrypting the drive. You'll need to restart your computer.
Enter your PIN or insert your USB key if prompted. Encrypting the drive may take a while. You can continue to use your computer while this runs, but it may be slower than usual until encryption is complete.
Thanks for watching.