Discrete TPM is not included on these platforms but Intel® Platform Trust Technology (Intel® PTT) is available (see more details here: http://www.intel.com/content/www/us/en/support/boards-and-kits/intel-nuc-boards/000007452.html) Intel PTT supports BitLocker* for hard drive encryption and supports all Microsoft requirements for firmware Trusted Platform Module (fTPM) 2.0.
At the BIOS level, please go ahead and enable PTT:
Here is an instruction set on how to turn on BitLocker on the Operating System drive however I would recommend that you check with Microsoft as they own this product:
- Open the Control Panel System and Security, click BitLocker Drive Encryption and then click Turn on BitLocker.
- Choose how you want to unlock your drive and follow the instructions in the next screen to set it up.
- BitLocker will provide you with a recovery key. This key can be used to access your encrypted files if you ever lose your main key.
- BitLocker will automatically encrypt new files as you add them, but you will need to choose what happens with the files currently on the drive. You can encrypt the entire drive – including the free space – or just encrypt the used disk files to speed up the process.
You can manage a locked drive – change the password, turn off the BitLocker, back up your recovery key, or perform other actions – from the BitLocker control panel window. Right-click an encrypted drive and select Manage BitLocker to go directly to it.
I would also recommend that Windows is installed on UEFI mode and please check the following website for further details (make sure that you check system requirements)
I hope this helps.