The BitLocker 'Configure TPM platform validation profile' setting should be enabled or disabled as appropriate. [Enabled/Disabled] (1) GPO: Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Operating System Drives\s4-o0\Configure TPM platform validation profile oval:org.secpod.oval:def:14620 SCAP Repo OVAL Definition 2013-08-13