SEDutil

Hardware boot drive encryption with NVME TCG OPAL drives works great with SEDutil. This is why we created https://sedutil.com. We struggled to find information on this issue and there is a lot of false information out there. If you have a TCG OPAL 2.0 compliant NVME drive, like a Samsung 960 Pro, 970 Pro 970 Evo, or 970 EVO plus, then you can use the SEDutil pre-boot authentication bootloader to unlock that drive and then automatically load Windows. SEDutil is BIOS independent and does not require a clean installation of Windows. Also, you can add and remove the SEDutil pre-boot authentication bootloader at will without having to reinstall Windows. Or, you can disable pre-boot authentication and leave the bootloader in place. With hardware Bitlocker you need a compatible drive, and the BIOS needs to specifically support Bitlocker. This is not the case with SEDutil. The only two downsides with SEDutil in Windows is that sleep is not supported (not really an issue with instant NVME hibernation, which is fully supported), and you must disable Secure Boot with SEDutil (debatable whether that is a security issue). Most of your questions will probably be answered here: https://sedutil.com/#faq If you have any questions please ask, and we will add them to the FAQs.