{"content":"<div></div>","rawMetadata":{"metadata":{"_op_canonicalUrlPrefix":"https://learn.microsoft.com/zh-tw/powershell/","_op_gitContributorInformation":{"author":{"display_name":"Banreet Kaur","id":"92906285","name":"Banreet","profile_url":"https://github.com/Banreet"},"contributors":[{"display_name":"Aaron Czechowski","id":"26784733","name":"aczechowski","profile_url":"https://github.com/aczechowski"}],"update_at":"2026/8/3","updated_at_date_time":"2026-08-03T08:27:46.5580446Z"},"_path":"module/configurationmanager/new-cmtsstepenablebitlocker.json","_rel":"../../","_tocRel":"../sccm-ps/toc.json","apiPlatform":"powershell","author":"Banreet","breadcrumb_path":"/powershell/sccm/bread/toc.json","canonical_url":"https://learn.microsoft.com/zh-tw/powershell/module/configurationmanager/new-cmtsstepenablebitlocker?view=sccm-ps","content_git_url":"https://github.com/MicrosoftDocs/sccm-docs-powershell-ref/blob/main/sccm-ps/ConfigurationManager/New-CMTSStepEnableBitLocker.md","default_moniker":"sccm-ps","depot_name":"MSDN.sccm-powershell","document_id":"724246c1-8124-e618-ea41-82da6f2e5735","document_version_independent_id":"98663982-8991-d482-9044-7300dbe8dfe2","external help file":"AdminUI.PS.dll-Help.xml","feedback_product_url":"https://feedbackportal.microsoft.com/feedback/forum/4669adfc-ee1b-ec11-b6e7-0022481f8472","feedback_system":"Standard","git_commit_id":"48cf632fb4b9ad92060012681a500478254de750","gitcommit":"https://github.com/MicrosoftDocs/sccm-docs-powershell/blob/48cf632fb4b9ad92060012681a500478254de750/sccm-ps/ConfigurationManager/New-CMTSStepEnableBitLocker.md","github_contributors":["aczechowski"],"locale":"zh-tw","manager":"laurawi","Module Name":"ConfigurationManager","monikers":["sccm-ps"],"ms.author":"dannygu","ms.date":"08/12/2021","ms.service":"microsoft-endpoint-configuration-manager","ms.subservice":"other","ms.topic":"reference","online version":"","open_to_public_contributors":true,"original_content_git_url":"https://github.com/MicrosoftDocs/sccm-docs-powershell/blob/live/sccm-ps/ConfigurationManager/New-CMTSStepEnableBitLocker.md","original_content_git_url_template":"{repo}/blob/{branch}/sccm-ps/ConfigurationManager/New-CMTSStepEnableBitLocker.md","PlatyPS schema version":"2.0.0","products":["https://authoring-docs-microsoft.poolparty.biz/devrel/f1499c3b-793f-48c3-a9ce-20285bcc6541"],"site_name":"Docs","titleSuffix":"Configuration Manager","uhfHeaderId":"MSDocsHeader-Powershell","updated_at":"2026-08-03 08:27 AM","xrefs":[{"href":"https://learn.microsoft.com/powershell/module/configurationmanager/new-cmtsstepenablebitlocker","monikerGroup":"f98fea35b6ac2b0f56c6ee5ec06ffce9","name":"New-CMTSStepEnableBitLocker","schemaType":"PowershellCmdlet","summary":"<p>建立 <strong>[啟用 BitLocker</strong> ] 步驟，您可以將其新增至工作順序。</p>\n","uid":"ConfigurationManager.New-CMTSStepEnableBitLocker"}],"ocv-translation-feedback":true},"_xrefmap":{"ConfigurationManager":{"href":"./","monikerGroup":"f98fea35b6ac2b0f56c6ee5ec06ffce9","name":"ConfigurationManager","schemaType":"PowershellModule","uid":"ConfigurationManager"},"ConfigurationManager.New-CMTSStepEnableBitLocker":{"href":"new-cmtsstepenablebitlocker","monikerGroup":"f98fea35b6ac2b0f56c6ee5ec06ffce9","name":"New-CMTSStepEnableBitLocker","schemaType":"PowershellCmdlet","summary":"<p>建立 <strong>[啟用 BitLocker</strong> ] 步驟，您可以將其新增至工作順序。</p>\n","uid":"ConfigurationManager.New-CMTSStepEnableBitLocker"}},"description":"<p>此 Cmdlet 會建立新的 <strong>啟用 BitLocker</strong> 步驟物件。 然後使用 <a href=\"add-cmtasksequencestep\">Add-CMTaskSequenceStep</a> Cmdlet 將步驟新增至工作順序。 如需此步驟的詳細資訊，請 <a href=\"/mem/configmgr/osd/understand/task-sequence-steps#BKMK_EnableBitLocker\">參閱關於工作順序步驟：啟用 BitLocker</a>。</p>\n<div class=\"NOTE\">\n<p>注意事項</p>\n<p>從 Configuration Manager 月臺磁碟驅動器執行 Configuration Manager Cmdlet，例如 <code>PS XYZ:\\&gt;</code>。 如需詳細資訊，請 <a href=\"/powershell/sccm/overview\">參閱開始使用</a>。</p>\n</div>\n","examples":[{"code":"$step = New-CMTSStepEnableBitLocker -Name \"Enable BitLocker\" -TpmOnly -CreateKeyOption ActiveDirectoryDomainServices -EncryptionMethod AES_256 -EnableSkipWhenNoValidTpm $false -EncryptFullDisk $false -WaitForBitLockerComplete $false\n\n$tsNameOsd = \"Default OS deployment\"\n$tsOsd = Get-CMTaskSequence -Name $tsNameOsd -Fast\n\n$tsOsd | Add-CMTaskSequenceStep -Step $step -InsertStepStartIndex 11","description":"","summary":"<p>此範例只會使用數個其他選項，為 <strong>TPM</strong><strong>的 [啟用 BitLocker</strong>] 步驟建立 物件。</p>\n<p>然後，它會取得工作順序物件，並將這個新步驟新增至索引 11 的工作順序。</p>\n","title":"範例 1"}],"inputs":[{"description":"","name":"<span class=\"no-loc xref\">None</span>\n"}],"links":[{"href":"get-cmtsstepenablebitlocker","text":"Get-CMTSStepEnableBitLocker"},{"href":"remove-cmtsstepenablebitlocker","text":"Remove-CMTSStepEnableBitLocker"},{"href":"set-cmtsstepenablebitlocker","text":"Set-CMTSStepEnableBitLocker"},{"href":"/mem/configmgr/osd/understand/task-sequence-steps#BKMK_EnableBitLocker","text":"關於工作順序步驟：啟用 BitLocker"}],"module":"ConfigurationManager","name":"New-CMTSStepEnableBitLocker","notes":"<p>如需此傳回物件及其屬性的詳細資訊，請 <a href=\"/mem/configmgr/develop/reference/osd/sms_tasksequence_enablebitlockeraction-server-wmi-class\">參閱SMS_TaskSequence_EnableBitLockerAction伺服器 WMI 類別</a>。</p>\n","outputs":[{"description":"","name":"<span class=\"no-loc xref\">IResultObject</span>\n"}],"parameters":[{"aliases":"Conditions","defaultValue":"None","description":"<p>指定要與這個步驟搭配使用的條件物件。 若要取得這個物件，請使用其中一個工作順序條件 Cmdlet。 例如， <a href=\"get-cmtsstepconditionvariable\">Get-CMTSStepConditionVariable</a>。</p>\n","name":"Condition","parameterValueGroup":"","position":"Named","type":"<p><span class=\"no-loc xref\">IResultObject</span><span>[</span><span>]</span></p>\n"},{"aliases":"cf","defaultValue":"None","description":"<p>執行 Cmdlet 之前提示您確認。</p>\n","name":"Confirm","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>新增此參數以啟用 [ <strong>發生錯誤時繼續</strong>] 步驟選項。 當您啟用此選項時，如果步驟失敗，工作順序會繼續。</p>\n","name":"ContinueOnError","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>使用下列其中一個值來指定要在何處建立修復金鑰：</p>\n<ul>\n<li>\n              <code>ActiveDirectoryDomainServices</code>：建立修復密碼並在Active Directory 中委付， (建議的) </li>\n<li>\n              <code>DoNotCreateRecoveryKey</code>：加密磁碟驅動器，但不要建立修復密碼。</li>\n</ul>\n","name":"CreateKeyOption","parameterValueGroup":"ActiveDirectoryDomainServices, DoNotCreateRecoveryKey","position":"Named","type":"<span class=\"no-loc xref\">CreateKeyType</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>指定此工作順序步驟的選擇性描述。</p>\n","name":"Description","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">String</span>\n"},{"aliases":"DisableThisStep","defaultValue":"None","description":"<p>新增此參數以停用此工作順序步驟。</p>\n","name":"Disable","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>此參數會將通配符視為常值字元值。 您無法將其與 <strong>ForceWildcardHandling</strong> 結合。</p>\n","name":"DisableWildcardHandling","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"SpecificDrive","defaultValue":"None","description":"<p>指定要加密的磁碟驅動器。 如果您未指定此參數，此步驟會加密目前的OS磁碟驅動器。</p>\n","name":"Drive","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">String</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>適用於 2006 版和更新版本。 將此參數 <code>true</code> 設定為 ，以針對沒有 TPM 或未啟用 TPM 的電腦略過此步驟。</p>\n","name":"EnableSkipWhenNoValidTpm","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">Boolean</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>新增此參數以使用完整磁碟加密。 根據預設， <strong>[啟用 BitLocker]</strong> 步驟只會加密磁碟驅動器上的已使用空間。</p>\n","name":"EncryptFullDisk","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"DiskEncryptionMethod","defaultValue":"None","description":"<p>適用於 2006 版和更新版本。 使用此參數來指定磁碟加密模式。 根據預設或未指定，此步驟會繼續使用OS版本的預設加密方法。</p>\n","name":"EncryptionMethod","parameterValueGroup":"DoNotSpecify, AES_128, AES_256, XTS_AES128, XTS_AES256, TotalCount","position":"Named","type":"<span class=\"no-loc xref\">DiskEncryptionMethod</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>此參數會處理通配符，並可能導致非預期的行為 (不建議) 。 您無法將其與 <strong>DisableWildcardHandling</strong> 結合。</p>\n","name":"ForceWildcardHandling","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"StepName","defaultValue":"None","description":"<p>指定此步驟的名稱，以在工作順序中識別它。</p>\n","isRequired":true,"name":"Name","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">String</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>如果您使用 <strong>TpmAndPin</strong> 參數，請使用此參數來指定 PIN 值。 將 4-20 個整數指定為安全字串。</p>\n","name":"Pin","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SecureString</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>新增此參數以設定 OS 磁碟驅動器的金鑰管理，以使用 TPM 和個人識別碼 (PIN) 。 當您指定此選項時，BitLocker 會鎖定一般開機程式，直到使用者提供 PIN 為止。 如果您使用此參數，請使用 <strong>Pin</strong> 來指定 PIN 值。 您無法將此參數與 <strong>TpmAndUsb</strong>、 <strong>TpmOnly</strong> 或 <strong>UsbOnly</strong> 結合。</p>\n","name":"TpmAndPin","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>新增此參數，以設定 OS 磁碟驅動器的金鑰管理，以使用 TPM 和儲存在 USB 快閃磁碟驅動器上的啟動金鑰。 當您選取此選項時，BitLocker 會鎖定一般開機程式，直到包含 BitLocker 啟動金鑰的 USB 裝置連結至電腦為止。 您無法將此參數與 <strong>TpmAndPin</strong>、 <strong>TpmOnly</strong> 或 <strong>UsbOnly</strong> 結合。</p>\n","name":"TpmAndUsb","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>新增此參數，以將OS磁碟驅動器的金鑰管理設定為只使用 TPM。 您無法將此參數與 <strong>TpmAndPin</strong>、 <strong>TpmAndUsb</strong> 或 <strong>UsbOnly</strong> 結合。</p>\n","name":"TpmOnly","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>新增此參數，將 OS 磁碟驅動器的金鑰管理設定為只使用儲存在 USB 快閃磁碟驅動器上的啟動金鑰。 當您選取此選項時，BitLocker 會鎖定一般開機程式，直到包含 BitLocker 啟動金鑰的 USB 裝置連結至電腦為止。 您無法將此參數與 <strong>TpmAndPin</strong>、 <strong>TpmAndUsb</strong> 或 <strong>TpmOnly</strong> 結合。</p>\n","name":"UsbOnly","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"","defaultValue":"None","description":"<p>新增此參數以設定步驟，以等候 BitLocker 完成所有磁碟驅動器上的磁碟驅動器加密程式，然後再繼續執行工作順序。</p>\n","name":"WaitForBitLockerComplete","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"},{"aliases":"wi","defaultValue":"None","description":"<p>顯示執行 Cmdlet 時會發生什麼情況。 它不會執行 Cmdlet。</p>\n","name":"WhatIf","parameterValueGroup":"","position":"Named","type":"<span class=\"no-loc xref\">SwitchParameter</span>\n"}],"schema":"PowershellCmdlet","summary":"<p>建立 <strong>[啟用 BitLocker</strong> ] 步驟，您可以將其新增至工作順序。</p>\n","syntaxes":["New-CMTSStepEnableBitLocker [-CreateKeyOption <CreateKeyType>] [-Drive <String>]\n [-EnableSkipWhenNoValidTpm <Boolean>] [-EncryptFullDisk] [-EncryptionMethod <DiskEncryptionMethod>]\n [-Pin <SecureString>] [-TpmAndPin] [-TpmAndUsb] [-TpmOnly] [-UsbOnly] [-WaitForBitLockerComplete]\n [-Condition <IResultObject[]>] [-ContinueOnError] [-Description <String>] [-Disable] -Name <String>\n [-DisableWildcardHandling] [-ForceWildcardHandling] [-WhatIf] [-Confirm] [<CommonParameters>]"],"uid":"ConfigurationManager.New-CMTSStepEnableBitLocker","hideEdit":true,"ms.translationtype":"MT","ms.contentlocale":"zh-tw","loc_version":"2024-08-21T21:18:36.7205003Z","loc_source_id":"Github-72476255#live","loc_file_id":"Github-72476255.live.MSDN.sccm-powershell.sccm-ps/ConfigurationManager/New-CMTSStepEnableBitLocker.md","xrefs":[{"href":"https://learn.microsoft.com/powershell/module/configurationmanager/new-cmtsstepenablebitlocker","monikerGroup":"f98fea35b6ac2b0f56c6ee5ec06ffce9","name":"New-CMTSStepEnableBitLocker","schemaType":"PowershellCmdlet","summary":"<p>建立 <strong>[啟用 BitLocker</strong> ] 步驟，您可以將其新增至工作順序。</p>\n","uid":"ConfigurationManager.New-CMTSStepEnableBitLocker"}],"canonical_url":"https://learn.microsoft.com/zh-tw/powershell/module/configurationmanager/new-cmtsstepenablebitlocker?view=sccm-ps","_op_canonicalUrl":"https://learn.microsoft.com/zh-tw/powershell/module/configurationmanager/new-cmtsstepenablebitlocker?view=sccm-ps"},"pageMetadata":"<meta name=\"description\" content=\"<p>此 Cmdlet 會建立新的 <strong>啟用 BitLocker</strong> 步驟物件。 然後使用 <a href=&quot;add-cmtasksequencestep&quot;>Add-CMTaskSequenceStep</a> Cmdlet 將步驟新增至工作順序。 如需此步驟的詳細資訊，請 <a href=&quot;/mem/configmgr/osd/understand/task-sequence-steps#BKMK_EnableBitLocker&quot;>參閱關於工作順序步驟：啟用 BitLocker</a>。</p>\n<div class=&quot;NOTE&quot;>\n<p>注意事項</p>\n<p>從 Configuration Manager 月臺磁碟驅動器執行 Configuration Manager Cmdlet，例如 <code>PS XYZ:\\&amp;gt;</code>。 如需詳細資訊，請 <a href=&quot;/powershell/sccm/overview&quot;>參閱開始使用</a>。</p>\n</div>\n\" />\r\n<meta name=\"hideEdit\" content=\"true\" />\r\n<meta name=\"loc_file_id\" content=\"Github-72476255.live.MSDN.sccm-powershell.sccm-ps/ConfigurationManager/New-CMTSStepEnableBitLocker.md\" />\r\n<meta name=\"loc_source_id\" content=\"Github-72476255#live\" />\r\n<meta name=\"loc_version\" content=\"2024-08-21T21:18:36.7205003Z\" />\r\n<meta name=\"module\" content=\"ConfigurationManager\" />\r\n<meta name=\"ms.contentlocale\" content=\"zh-tw\" />\r\n<meta name=\"ms.translationtype\" content=\"MT\" />\r\n<meta name=\"name\" content=\"New-CMTSStepEnableBitLocker\" />\r\n<meta name=\"notes\" content=\"<p>如需此傳回物件及其屬性的詳細資訊，請 <a href=&quot;/mem/configmgr/develop/reference/osd/sms_tasksequence_enablebitlockeraction-server-wmi-class&quot;>參閱SMS_TaskSequence_EnableBitLockerAction伺服器 WMI 類別</a>。</p>\n\" />\r\n<meta name=\"schema\" content=\"PowershellCmdlet\" />\r\n<meta name=\"summary\" content=\"<p>建立 <strong>[啟用 BitLocker</strong> ] 步驟，您可以將其新增至工作順序。</p>\n\" />\r\n<meta name=\"syntaxes\" content=\"New-CMTSStepEnableBitLocker [-CreateKeyOption <CreateKeyType>] [-Drive <String>]\n [-EnableSkipWhenNoValidTpm <Boolean>] [-EncryptFullDisk] [-EncryptionMethod <DiskEncryptionMethod>]\n [-Pin <SecureString>] [-TpmAndPin] [-TpmAndUsb] [-TpmOnly] [-UsbOnly] [-WaitForBitLockerComplete]\n [-Condition <IResultObject[]>] [-ContinueOnError] [-Description <String>] [-Disable] -Name <String>\n [-DisableWildcardHandling] [-ForceWildcardHandling] [-WhatIf] [-Confirm] [<CommonParameters>]\" />\r\n<meta name=\"uid\" content=\"ConfigurationManager.New-CMTSStepEnableBitLocker\" />\r\n","themesRelativePathToOutputRoot":"_themes/"}