# Enable BitLocker

The **Enable BitLocker** step definition will enable BitLocker on the current computer, encrypting the operating system volume with the specified configuration.

<figure><img src="/files/sMsIict9Yq9lqCwwoI3H" alt=""><figcaption></figcaption></figure>

Available encryption methods are:

* XtsAes256
* XtsAes128
* Aes256
* Aes128

Note that if the volume is already encrypted (or still encrypting) this step will have no effect.  Changing the encryption method requires completely decrypting the drive.

This step should be used twice in your task sequence

* First in WinPE right after your Format Disk step, to pre-provision Bitlocker
* Second in Full OS, near the end of your Task Sequence to enable the protector(s)

<figure><img src="/files/0osR5xLl6hfoOsXSA4D9" alt=""><figcaption></figcaption></figure>

After the Task Sequence:

<figure><img src="/files/heIBg1F8z5ptvxufMVAC" alt=""><figcaption></figcaption></figure>


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://documentation.2pintsoftware.com/deployr/reference/step-definitions/enable-bitlocker.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.