# Enable BitLocker

The **Enable BitLocker** step definition will enable BitLocker on the current computer, encrypting the operating system volume with the specified configuration.

<figure><img src="https://744643921-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FJO9NLelA0RS8JB4i9oaQ%2Fuploads%2F7GVvZ4Jlsfvt4cosrxsg%2Fimage.png?alt=media&#x26;token=84ba4c25-6d24-432d-9247-4dea0803afac" alt=""><figcaption></figcaption></figure>

Available encryption methods are:

* XtsAes256
* XtsAes128
* Aes256
* Aes128

Note that if the volume is already encrypted (or still encrypting) this step will have no effect.  Changing the encryption method requires completely decrypting the drive.

This step should be used twice in your task sequence

* First in WinPE right after your Format Disk step, to pre-provision Bitlocker
* Second in Full OS, near the end of your Task Sequence to enable the protector(s)

<figure><img src="https://744643921-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FJO9NLelA0RS8JB4i9oaQ%2Fuploads%2FbCm3pGTu8o2mU0Cvo1iT%2Fimage.png?alt=media&#x26;token=ec9ab38a-2ca3-4467-809e-79e33285d56d" alt=""><figcaption></figcaption></figure>

After the Task Sequence:

<figure><img src="https://744643921-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FJO9NLelA0RS8JB4i9oaQ%2Fuploads%2FFg0vIUxfDqfngl10xSxr%2Fimage.png?alt=media&#x26;token=8b775cc9-615f-41fd-b334-f9b893a5928a" alt=""><figcaption></figcaption></figure>