The "Require additional authentication at startup" machine setting should be configured correctly.
[enabled/disabled]
Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\Require additional authentication at startup
oval:org.secpod.oval:def:19483
SCAP Repo OVAL Definition
2014-05-29