London: Bitlocker protects your data by encrypting the hard disk drive. Once enabled only with right encryption key a user can decrypt it.
To enable Bitlocker a user needs to be logged in as Administrator or in other sense a user needs to have Administrative rights.
To enable Bitlocker a user must click on Start then type Manage Bitlocker or simple by going to My computer and select the drive.
Select the Manage Bitlocker.
Then click on Turn on Bitlocker.
Now Some of you may see an error message saying
“ This device can’t use a Trusted Platform Module. Your administrator must select the “Allow BitLocker without a compatible TPM” option in the “Require additional authentication at startup” policy for OS volumes.”
This error message simply shows up when there is no TPM chip on the computer. No need to panic, you can still encrypt your computer without having a TPM chip. Just need to try some other ways.
“ Trusted Platform Module is a chip installed by manufactures in processors. This stores the encryption key itself. “
How to fix :
Step 1: Go to Group Policy Editor by typing “gpedit.msc” on Run dialogue box (Windows key +R) , press enter.
Step 2: Then expand the following section
Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives
On the right hand side you will notice one option “Require additional authentication on start-up ” , double click on that option .
Step 3 : Now You will notice that by default its not configured and checked as Not Configured. You need to Enable it. Now it should automatically check Allow BitLocker without a compatible TPM box. But make sure you check in case it does not select the option automatically.
Now click Ok and Close the Group Policy Editor.
Step 4 : Now go back to My computer, select the drive and Turn on the Bitlocker. This should allow you to go through the process, you need to save the encryption on a USB drive .
N.B : If you are using Windows 10 operating system, make sure you have Pro version installed.