For the complete documentation index, see llms.txt. This page is also available as Markdown.

Enable BitLocker

The Enable BitLocker step definition will enable BitLocker on the current computer, encrypting the operating system volume with the specified configuration.

Available encryption methods are:

  • XtsAes256

  • XtsAes128

  • Aes256

  • Aes128

Note that if the volume is already encrypted (or still encrypting) this step will have no effect. Changing the encryption method requires completely decrypting the drive.

This step should be used twice in your task sequence

  • First in WinPE right after your Format Disk step, to pre-provision Bitlocker

  • Second in Full OS, near the end of your Task Sequence to enable the protector(s)

After the Task Sequence:

Last updated