{"content":"<div></div>","rawMetadata":{"metadata":{"_op_canonicalUrlPrefix":"https://learn.microsoft.com/zh-cn/powershell/","_op_gitContributorInformation":{"author":{"display_name":"Banreet Kaur","id":"92906285","name":"Banreet","profile_url":"https://github.com/Banreet"},"contributors":[{"display_name":"Aaron Czechowski","id":"26784733","name":"aczechowski","profile_url":"https://github.com/aczechowski"}],"update_at":"2026/9/1","updated_at_date_time":"2026-09-01T12:20:21.2007623Z"},"_path":"module/configurationmanager/new-cmtsstepenablebitlocker.json","_rel":"../../","_tocRel":"../sccm-ps/toc.json","apiPlatform":"powershell","author":"Banreet","breadcrumb_path":"/powershell/sccm/bread/toc.json","canonical_url":"https://learn.microsoft.com/zh-cn/powershell/module/configurationmanager/new-cmtsstepenablebitlocker?view=sccm-ps","content_git_url":"https://github.com/MicrosoftDocs/sccm-docs-powershell-ref/blob/main/sccm-ps/ConfigurationManager/New-CMTSStepEnableBitLocker.md","default_moniker":"sccm-ps","depot_name":"MSDN.sccm-powershell","external help file":"AdminUI.PS.dll-Help.xml","feedback_product_url":"https://feedbackportal.microsoft.com/feedback/forum/4669adfc-ee1b-ec11-b6e7-0022481f8472","feedback_system":"Standard","git_commit_id":"48cf632fb4b9ad92060012681a500478254de750","gitcommit":"https://github.com/MicrosoftDocs/sccm-docs-powershell/blob/48cf632fb4b9ad92060012681a500478254de750/sccm-ps/ConfigurationManager/New-CMTSStepEnableBitLocker.md","github_contributors":["aczechowski"],"locale":"zh-cn","manager":"laurawi","Module Name":"ConfigurationManager","monikers":["sccm-ps"],"ms.author":"dannygu","ms.date":"08/12/2021","ms.service":"configuration-manager","ms.subservice":"other","ms.topic":"reference","online version":"","open_to_public_contributors":true,"original_content_git_url":"https://github.com/MicrosoftDocs/sccm-docs-powershell/blob/live/sccm-ps/ConfigurationManager/New-CMTSStepEnableBitLocker.md","original_content_git_url_template":"{repo}/blob/{branch}/sccm-ps/ConfigurationManager/New-CMTSStepEnableBitLocker.md","PlatyPS schema version":"2.0.0","products":["https://authoring-docs-microsoft.poolparty.biz/devrel/f1499c3b-793f-48c3-a9ce-20285bcc6541"],"site_name":"Docs","titleSuffix":"Configuration Manager","uhfHeaderId":"MSDocsHeader-Powershell","updated_at":"2026-09-01 12:20 PM","xrefs":[{"href":"https://learn.microsoft.com/powershell/module/configurationmanager/new-cmtsstepenablebitlocker","monikerGroup":"f98fea35b6ac2b0f56c6ee5ec06ffce9","name":"New-CMTSStepEnableBitLocker","schemaType":"PowershellCmdlet","summary":"<p>创建可以添加到任务序列的 <strong>“启用 BitLocker</strong> ”步骤。</p>\n","uid":"ConfigurationManager.New-CMTSStepEnableBitLocker"}],"ocv-translation-feedback":true},"_xrefmap":{"ConfigurationManager":{"href":"./","monikerGroup":"f98fea35b6ac2b0f56c6ee5ec06ffce9","name":"ConfigurationManager","schemaType":"PowershellModule","uid":"ConfigurationManager"},"ConfigurationManager.New-CMTSStepEnableBitLocker":{"href":"new-cmtsstepenablebitlocker","monikerGroup":"f98fea35b6ac2b0f56c6ee5ec06ffce9","name":"New-CMTSStepEnableBitLocker","schemaType":"PowershellCmdlet","summary":"<p>创建可以添加到任务序列的 <strong>“启用 BitLocker</strong> ”步骤。</p>\n","uid":"ConfigurationManager.New-CMTSStepEnableBitLocker"}},"description":"<p>此 cmdlet 创建新的 <strong>Enable BitLocker</strong> 步骤对象。 然后使用 <a href=\"add-cmtasksequencestep\">Add-CMTaskSequenceStep</a> cmdlet 将步骤添加到任务序列。 有关此步骤的详细信息，请参阅 <a href=\"/mem/configmgr/osd/understand/task-sequence-steps#BKMK_EnableBitLocker\">关于任务序列步骤：启用 BitLocker</a>。</p>\n<div class=\"NOTE\">\n<p>注意</p>\n<p>从 Configuration Manager 站点驱动器运行 Configuration Manager cmdlet，例如 <code>PS XYZ:\\&gt;</code>。 有关详细信息，请参阅 <a href=\"/powershell/sccm/overview\">入门</a>。</p>\n</div>\n","examples":[{"code":"$step = New-CMTSStepEnableBitLocker -Name \"Enable BitLocker\" -TpmOnly -CreateKeyOption ActiveDirectoryDomainServices -EncryptionMethod AES_256 -EnableSkipWhenNoValidTpm $false -EncryptFullDisk $false -WaitForBitLockerComplete $false\n\n$tsNameOsd = \"Default OS deployment\"\n$tsOsd = Get-CMTaskSequence -Name $tsNameOsd -Fast\n\n$tsOsd | Add-CMTaskSequenceStep -Step $step -InsertStepStartIndex 11","description":"","summary":"<p>此示例仅使用其他几个选项为 <strong>TPM</strong><strong>启用 BitLocker</strong> 步骤创建对象。</p>\n<p>然后，它获取任务序列对象，并将此新步骤添加到索引 11 处的任务序列。</p>\n","title":"示例 1"}],"inputs":[{"description":"","name":"<span class=\"no-loc xref\">None</span>\n"}],"links":[{"href":"get-cmtsstepenablebitlocker","text":"Get-CMTSStepEnableBitLocker"},{"href":"remove-cmtsstepenablebitlocker","text":"Remove-CMTSStepEnableBitLocker"},{"href":"set-cmtsstepenablebitlocker","text":"Set-CMTSStepEnableBitLocker"},{"href":"/mem/configmgr/osd/understand/task-sequence-steps#BKMK_EnableBitLocker","text":"关于任务序列步骤：启用 BitLocker"}],"module":"ConfigurationManager","name":"New-CMTSStepEnableBitLocker","notes":"<p>有关此返回对象及其属性的详细信息，请参阅 <a href=\"/mem/configmgr/develop/reference/osd/sms_tasksequence_enablebitlockeraction-server-wmi-class\">SMS_TaskSequence_EnableBitLockerAction服务器 WMI 类</a>。</p>\n","outputs":[{"description":"","name":"<span class=\"no-loc xref\">IResultObject</span>\n"}],"parameters":[{"aliases":"Conditions","defaultValue":"None","description":"<p>指定要用于此步骤的条件对象。 若要获取此对象，请使用任务序列条件 cmdlet 之一。 例如 <a href=\"get-cmtsstepconditionvariable\">Get-CMTSStepConditionVariable</a>。</p>\n","name":"Condition","parameterValueGroup":"","position":"Named","type":"<p><span class=\"no-loc xref\">IResultObject</span><span>[</span><span>]</span></p>\n"},{"aliases":"cf","defaultValue":"None","description":"<p>提示你在运行 cmdlet 之前进行确认。</p>\n","name":"Confirm","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>添加此参数以启用步骤选项“ <strong>出错时继续</strong>”。 启用此选项时，如果步骤失败，任务序列将继续。</p>\n","name":"ContinueOnError","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>使用以下值之一指定创建恢复密钥的位置：</p>\n<ul>\n<li>\n              <code>ActiveDirectoryDomainServices</code>：在 Active Directory 中创建恢复密码并将其托管 (建议) </li>\n<li>\n              <code>DoNotCreateRecoveryKey</code>：加密驱动器，但不要创建恢复密码。</li>\n</ul>\n","name":"CreateKeyOption","parameterValueGroup":"ActiveDirectoryDomainServices, DoNotCreateRecoveryKey","position":"Named","type":"<span class=\"no-loc xref\">CreateKeyType</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>为此任务序列步骤指定可选说明。</p>\n","name":"Description","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">String</span>\n"},{"aliases":"DisableThisStep","defaultValue":"None","description":"<p>添加此参数以禁用此任务序列步骤。</p>\n","name":"Disable","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>此参数将通配符视为文本字符值。 不能将其与 <strong>ForceWildcardHandling</strong> 组合使用。</p>\n","name":"DisableWildcardHandling","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"SpecificDrive","defaultValue":"None","description":"<p>指定要加密的驱动器。 如果未指定此参数，则步骤将加密当前 OS 驱动器。</p>\n","name":"Drive","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">String</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>适用于版本 2006 及更高版本。 将此参数设置为 以 <code>true</code> 跳过没有 TPM 或未启用 TPM 的计算机的此步骤。</p>\n","name":"EnableSkipWhenNoValidTpm","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">Boolean</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>添加此参数以使用完整磁盘加密。 默认情况下， <strong>“启用 BitLocker”</strong> 步骤仅加密驱动器上的已用空间。</p>\n","name":"EncryptFullDisk","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"DiskEncryptionMethod","defaultValue":"None","description":"<p>适用于版本 2006 及更高版本。 使用此参数指定磁盘加密模式。 默认情况下，如果未指定，步骤将继续对 OS 版本使用默认加密方法。</p>\n","name":"EncryptionMethod","parameterValueGroup":"DoNotSpecify, AES_128, AES_256, XTS_AES128, XTS_AES256, TotalCount","position":"Named","type":"<span class=\"no-loc xref\">DiskEncryptionMethod</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>此参数处理通配符，并可能导致意外行为， (不建议) 。 不能将其与 <strong>DisableWildcardHandling</strong> 组合使用。</p>\n","name":"ForceWildcardHandling","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"StepName","defaultValue":"None","description":"<p>指定此步骤的名称，以便在任务序列中标识它。</p>\n","isRequired":true,"name":"Name","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">String</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>如果使用参数 <strong>TpmAndPin</strong>，请使用此参数指定 PIN 值。 指定 4-20 个整数作为安全字符串。</p>\n","name":"Pin","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SecureString</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>添加此参数可将 OS 驱动器的密钥管理配置为使用 TPM 和个人标识号 (PIN) 。 指定此选项时，BitLocker 会锁定正常的启动过程，直到用户提供 PIN。 如果使用此参数，请使用 <strong>Pin</strong> 指定 PIN 值。 不能将此参数与 <strong>TpmAndUsb</strong>、 <strong>TpmOnly</strong> 或 <strong>UsbOnly</strong> 组合使用。</p>\n","name":"TpmAndPin","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>添加此参数可将 OS 驱动器的密钥管理配置为使用存储在 U 盘上的 TPM 和启动密钥。 选择此选项时，BitLocker 会锁定正常的启动过程，直到包含 BitLocker 启动密钥的 USB 设备连接到计算机。 不能将此参数与 <strong>TpmAndPin</strong>、 <strong>TpmOnly</strong> 或 <strong>UsbOnly</strong> 组合使用。</p>\n","name":"TpmAndUsb","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>添加此参数可将 OS 驱动器的密钥管理配置为仅使用 TPM。 不能将此参数与 <strong>TpmAndPin</strong>、 <strong>TpmAndUsb</strong> 或 <strong>UsbOnly</strong> 组合使用。</p>\n","name":"TpmOnly","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>添加此参数可将 OS 驱动器的密钥管理配置为仅使用存储在 U 盘上的启动密钥。 选择此选项时，BitLocker 会锁定正常的启动过程，直到包含 BitLocker 启动密钥的 USB 设备连接到计算机。 不能将此参数与 <strong>TpmAndPin</strong>、 <strong>TpmAndUsb</strong> 或 <strong>TpmOnly</strong> 组合使用。</p>\n","name":"UsbOnly","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>添加此参数可将步骤配置为等待 BitLocker 在所有驱动器上完成驱动器加密过程，然后继续执行任务序列。</p>\n","name":"WaitForBitLockerComplete","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"wi","defaultValue":"None","description":"<p>显示在 cmdlet 运行时发生的情况。 它不运行 cmdlet。</p>\n","name":"WhatIf","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"}],"schema":"PowershellCmdlet","summary":"<p>创建可以添加到任务序列的 <strong>“启用 BitLocker</strong> ”步骤。</p>\n","syntaxes":["New-CMTSStepEnableBitLocker [-CreateKeyOption <CreateKeyType>] [-Drive <String>]\n [-EnableSkipWhenNoValidTpm <Boolean>] [-EncryptFullDisk] [-EncryptionMethod <DiskEncryptionMethod>]\n [-Pin <SecureString>] [-TpmAndPin] [-TpmAndUsb] [-TpmOnly] [-UsbOnly] [-WaitForBitLockerComplete]\n [-Condition <IResultObject[]>] [-ContinueOnError] [-Description <String>] [-Disable] -Name <String>\n [-DisableWildcardHandling] [-ForceWildcardHandling] [-WhatIf] [-Confirm] [<CommonParameters>]"],"uid":"ConfigurationManager.New-CMTSStepEnableBitLocker","hideEdit":true,"ms.translationtype":"MT","ms.contentlocale":"zh-cn","loc_version":"2024-08-21T21:18:36.7205003Z","loc_source_id":"Github-72476255#live","loc_file_id":"Github-72476255.live.MSDN.sccm-powershell.sccm-ps/ConfigurationManager/New-CMTSStepEnableBitLocker.md","xrefs":[{"href":"https://learn.microsoft.com/powershell/module/configurationmanager/new-cmtsstepenablebitlocker","monikerGroup":"f98fea35b6ac2b0f56c6ee5ec06ffce9","name":"New-CMTSStepEnableBitLocker","schemaType":"PowershellCmdlet","summary":"<p>创建可以添加到任务序列的 <strong>“启用 BitLocker</strong> ”步骤。</p>\n","uid":"ConfigurationManager.New-CMTSStepEnableBitLocker"}],"canonical_url":"https://learn.microsoft.com/zh-cn/powershell/module/configurationmanager/new-cmtsstepenablebitlocker?view=sccm-ps","_op_canonicalUrl":"https://learn.microsoft.com/zh-cn/powershell/module/configurationmanager/new-cmtsstepenablebitlocker?view=sccm-ps"},"pageMetadata":"<meta name=\"description\" content=\"<p>此 cmdlet 创建新的 <strong>Enable BitLocker</strong> 步骤对象。 然后使用 <a href=&quot;add-cmtasksequencestep&quot;>Add-CMTaskSequenceStep</a> cmdlet 将步骤添加到任务序列。 有关此步骤的详细信息，请参阅 <a href=&quot;/mem/configmgr/osd/understand/task-sequence-steps#BKMK_EnableBitLocker&quot;>关于任务序列步骤：启用 BitLocker</a>。</p>\n<div class=&quot;NOTE&quot;>\n<p>注意</p>\n<p>从 Configuration Manager 站点驱动器运行 Configuration Manager cmdlet，例如 <code>PS XYZ:\\&amp;gt;</code>。 有关详细信息，请参阅 <a href=&quot;/powershell/sccm/overview&quot;>入门</a>。</p>\n</div>\n\" />\r\n<meta name=\"hideEdit\" content=\"true\" />\r\n<meta name=\"loc_file_id\" content=\"Github-72476255.live.MSDN.sccm-powershell.sccm-ps/ConfigurationManager/New-CMTSStepEnableBitLocker.md\" />\r\n<meta name=\"loc_source_id\" content=\"Github-72476255#live\" />\r\n<meta name=\"loc_version\" content=\"2024-08-21T21:18:36.7205003Z\" />\r\n<meta name=\"module\" content=\"ConfigurationManager\" />\r\n<meta name=\"ms.contentlocale\" content=\"zh-cn\" />\r\n<meta name=\"ms.translationtype\" content=\"MT\" />\r\n<meta name=\"name\" content=\"New-CMTSStepEnableBitLocker\" />\r\n<meta name=\"notes\" content=\"<p>有关此返回对象及其属性的详细信息，请参阅 <a href=&quot;/mem/configmgr/develop/reference/osd/sms_tasksequence_enablebitlockeraction-server-wmi-class&quot;>SMS_TaskSequence_EnableBitLockerAction服务器 WMI 类</a>。</p>\n\" />\r\n<meta name=\"schema\" content=\"PowershellCmdlet\" />\r\n<meta name=\"summary\" content=\"<p>创建可以添加到任务序列的 <strong>“启用 BitLocker</strong> ”步骤。</p>\n\" />\r\n<meta name=\"syntaxes\" content=\"New-CMTSStepEnableBitLocker [-CreateKeyOption <CreateKeyType>] [-Drive <String>]\n [-EnableSkipWhenNoValidTpm <Boolean>] [-EncryptFullDisk] [-EncryptionMethod <DiskEncryptionMethod>]\n [-Pin <SecureString>] [-TpmAndPin] [-TpmAndUsb] [-TpmOnly] [-UsbOnly] [-WaitForBitLockerComplete]\n [-Condition <IResultObject[]>] [-ContinueOnError] [-Description <String>] [-Disable] -Name <String>\n [-DisableWildcardHandling] [-ForceWildcardHandling] [-WhatIf] [-Confirm] [<CommonParameters>]\" />\r\n<meta name=\"uid\" content=\"ConfigurationManager.New-CMTSStepEnableBitLocker\" />\r\n","themesRelativePathToOutputRoot":"_themes/"}