this machine is disabled for file encryption

Click OK and close the group policy editor. The rest of the options are enabled automatically and keep them to default. Double-click Require additional authentication at startup.īy default Require addition authentication at startup policy is not configured.

Click Operating System Drives and on the right pane you find many settings.

Under Computer Configuration, expand Windows Components and then BitLocker Drive Encryption.

This brings up Local Group Policy Editor.

On Windows 10 computer, click Run and enter gpedit.msc.

Configure require addition authentication at startup.Ĭonfigure Require Additional Authentication at Startup.

Here are the steps required to enable BitLocker encryption on Windows 10 machine. Your administrator must set the “Allow BitLocker without a compatible TPM” option in the “Require addition authentication at start-up” policy for OS volumes.Įnable BitLocker Encryption on Windows 10 without TPM This device cannot use a Trusted Platform Module. So what happens when you enable BitLocker encryption on Windows 10 machine when there is no TPM chip.

When you enable BitLocker encryption on Windows 10, keep your computer connected to an uninterrupted power supply throughout the entire process.

It really depends on the amount of data and size of the drive. There is no specific time duration for encryption to complete.

BitLocker drive encryption requires time to complete the encryption.

Most of all ensure the computer’s BIOS is updated to latest version.

It is always recommended to have TPM chip and enable BitLocker driver encryption.

As mentioned earlier, BitLocker Drive Encryption is available only on Windows 10 Pro and Windows 10 Enterprise editions.

Configure Require Additional Authentication at Startup.

Enable BitLocker Encryption on Windows 10 without TPM.

BitLocker Encryption – Important Points.

This machine is disabled for file encryption