To use Bitlocker Drive Encryption without hardware cryptography, you need to first configure the local computer policy to use USB key mode rather than TPM, as described below.

1. Within the local computer policy, navigate to the following location: Computer Configuration Administrative Templates Windows Components Bitlocker Drive Encryption Operating System Drives.
2. Right click Require additional authentication at startup and click Edit.
3. Select Enabled.
4. Under the Options section, select Allow Bitlocker without a compatible TPM.
5. Click OK.

To apply the changes immediately, open the Start menu and type gpupdate.exe /force and press Enter.