Encryption ONLY using PIN

Question

Hello, 
 I&acute;m trying to encrypt some WIndows 10 Surface Books. The users should only use the PIN method to unlock the Notebooks at startup. The Policy in Safeguard is set to TPM+PIN and an GPO is also applied with "use additional authentification at startup". 
 However, when applying the policy, the Bitlocker Window pops up only with the option to save the encryptionkey to an usb stick. 
 I just can&acute;t find my mistake or the missing settings. 
 
 Thanks, 
 Philipp

MichaelMcLannahan · Answer

Good afternoon! 
 
 This isn't often recommended as the detachable keyboards can often not be detected at this crucial point - meaning you can't type in the PIN if you don't have a keyboard. 
 
 It's true though that many newer tablets/hybrids do support keyboards at pre-boot, so you may want to enable it. I haven't out of choice for this reason (I have a very varied estate and in includes some genuine Surface 3 and beyond, but also many other models from other parties which may not support it!) 
 
 However, if you do this article may help more? 
 
 https://blogs.technet.microsoft.com/askpfeplat/2014/07/13/bitlocker-pin-on-surface-pro-3-and-other-tablets/