Queries regarding Encryption

Question

Hello 
 
 We're a business with over 400 devices and we're currently looking into methods of Encryption, we've stumbled across Sophos Safeguard Encryption and we have a couple of questions: 
 Does it require Bitlocker? If so does this have to be enabled and configured through a GPO or just Enabled and Sophos configures the rest? 
 I've read with Bitlocker that you need two partitions, would this be something that would have to be configured prior to Deploying the agent for Encryption? 
 
 Thanks

MichaelMcLannahan · Answer

Hi James - SafeGuard will "manage" BitLocker for you. Once you've created the correct policies it'll enable BitLocker on the client and store the recovery key centrally. 
 You can (and should) use TPM as a protector, but since Windows 10 (compatible versions) it's possible to use BitLocker without needing a TPM chip. Rather than a PIN though this will be secured by a USB startup key/and/or a password. 
 You can use TPM with or without a PIN but a PIN (6 digits now) is recommended.