The BitLocker 'Allow enhanced PINs for startup' setting should be configured correctly. [Enabled/Disabled] (1) GPO: Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\s1-o0\Allow enhanced PINs for startup oval:org.secpod.oval:def:14698 SCAP Repo OVAL Definition 2013-08-13