Policy

Allow enhanced PINs for startup

This policy setting allows you to configure whether or not enhanced startup PINs are used with BitLocker. Enhanced startup PINs permit the use of characters including uppercase and lowercase letters, symbols, numbers, and spaces. This policy setting is applied when you turn on BitLocker. If you enable this policy setting, all new BitLocker startup PINs set will be enhanced PINs. Note: Not all computers may support enhanced PINs in the pre-boot environment. It is strongly recommended that users perform a system check during BitLocker setup. If you disable or do not configure this policy setting, enhanced PINs will not be used.

Policy
Pack Microsoft Windows
Category Windows Components / BitLocker Drive Encryption / Operating System Drives
Policy ID bc206feeda12
Internal name EnhancedPIN_Name

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\FVE\UseEnhancedPin (enabled) = 1
HKLM\Software\Policies\Microsoft\FVE\UseEnhancedPin (disabled) = 0

Policy notes

This policy setting allows you to configure whether or not enhanced startup PINs are used with BitLocker. Enhanced startup PINs permit the use of characters including uppercase and lowercase letters, symbols, numbers, and spaces. This policy setting is applied when you turn on BitLocker. If you enable this policy setting, all new BitLocker startup PINs set will be enhanced PINs. Note: Not all computers may support enhanced PINs in the pre-boot environment. It is strongly recommended that users perform a system check during BitLocker setup. If you disable or do not configure this policy setting, enhanced PINs will not be used.

Related policies

Allow devices compliant with InstantGo or HSTI to opt out of pre-boot PIN.Allow network unlock at startupAllow Secure Boot for integrity validationChoose how BitLocker-protected operating system drives can be recoveredConfigure minimum PIN length for startupConfigure pre-boot recovery message and URLConfigure TPM platform validation profile (Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2)