Add simple USB in addition to TPM for Bitlocker Boot

gpedit.msc
Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives
Require Additional Authentication at startup
Enable then Configure TPM Startup Key
Require Startup Key With TPM
manage-bde -protectors -add c: -TPMAndStartupKey [USB DRIVE LETTER]
manage-bde -status

Back to Top