Windows 10: Win11 with Bitlocker - disable TPM

Hello.I have a Win 11 system with Bitlocker enabled on the OS drive with the key stored in TPM. I would like to stop using TPM to store the key and store it on the drive - having it encrypted with a PIN/password only. I'm aware of the risks brute force attacks, but this is really not the vector I'm protecting against. I want to keep TPM enabled in UEFI. I'm dual booting and I want to use the chip with the other OS. Of course, dual booting often breaks the verification process and I'm asked to enter the recovery key, which is quite tedious.I already tried to check the "Allow Bitlocker without

:)

 

BitLocker Setup- How Do I Disable the TPM and Use a Password Instead?

I would like to enable BitLocker on my laptop, which has a TPM. However, I want to use a password instead of the TPM to decrypt the drive during pre-boot.

I've tried disabling the TPM (using 'tpm.msc') and then enabling "Require additional authentication at startup" within the Group Policy Editor, but those steps didn't work.

How can I disable the TPM and use a password instead? Alternatively, how can I keep the TPM enabled but also require a password (not a PIN) during pre-boot?

Thanks!

 

Bitlocker - Win 10 - TPM 2.0 - Legacy Mode

According to here you need to boot in UEFI to configure bitlocker then you can change to CSM.

Pre-Provision Bitlocker - TPM 2.0 - SCCM 1610

 

Having an issue with a customer trying to enable Bitlocker with MECM on a device with a TPM disabled

Having an issue with a customer trying to enable Bitlocker with Microsoft Endpoint Configurartion Manager on a device with a TPM disabled, they are limited due to these are Chinese devices, with a TPM, but due to some legal restriction, they have to have the TPM disabled, and still need to enable bitlocker, and attempting to use the bitlocker management setting to allow bitlocker without a compatible TPM. This seems to only work for devices that truly have no TPM, but does not seem to work for a device with the TPM disabled. Can you confirm if is this expected behavior or not. Thanks!