0

I understand that I have to change the group policy in win 11 to require additional verification at startup, but what are the cmd's to set it up? Bitlocker by default is just TPM.

I would like to be able to use usb stick and pin together to startup my machine. Thanks

D Yuri
  • 151
  • 1
  • 7

1 Answers1

0

The syntax would be:

manage-bde -protectors -add C: -TPMandPINandStartupKey -tp 12345678 -tsk E:

["12345678" being the PIN and e:\ being the usb key's drive letter]