The "Require additional authentication at startup" machine setting should be configured correctly. [enabled/disabled] Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Require additional authentication at startup oval:org.secpod.oval:def:19483 SCAP Repo OVAL Definition 2014-05-29