Configure Bitlocker during deployment

Set X256 AES Encryption Cipher

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" -t REG_DWORD -v EncryptionMethodWithXtsFdv -d 7 -f

Set Full Disk Encryption

 reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE" -t REG_DWORD -v OSEncryptionType -d 1 -f

Set Bitlocker PIN

manage-bde -add C: -TPMAndPIN 123456

Enable Bitlocker

manage-bde -on C: -rp