The BitLocker 'Allow enhanced PINs for startup' setting should be configured correctly.
[Enabled/Disabled]
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\s1-o0\Allow enhanced PINs for startup
oval:org.secpod.oval:def:14698
SCAP Repo OVAL Definition
2013-08-13