https://guid.cam/tech/shasta/enable-bitlocker-windows-10-without-tpm/