Setup BitLocker with PowerShell

First, add a recovery key protector. The key will be printed to the console, make sure to record it.

Add-BitLockerKeyProtector -MountPoint "C:" -RecoveryPasswordProtector

Next, enable and set it to use the TPM

Enable-BitLocker -MountPoint "C:" -EncryptionMethod XtsAes256 -SkipHardwareTest -TpmProtector

Get the available key protectors (TPM, Recovery Password, etc)

(Get-BitLockerVolume -MountPoint C).KeyProtector

Remove a key protector

(Get-BitLockerVolume -MountPoint C).KeyProtector[0].KeyProtectorId | Remove-BitLockerKeyProtector -MountPoint C

Encrypt secondary drives

Enable-BitLocker -MountPoint D -EncryptionMethod XtsAes256 -RecoveryPasswordProtector
Enable-BitLockerAutoUnlock -MountPoint D

Documentation