Windows 11 is supported
It’s possible to encrypt only the operating system drive or all fixed drives
Integration with Active Directory doesn't require service accounts or group policies
Multiple Recovery passwords can be saved in Active Directory or CapaInstaller or both
Encryption can be started without waiting for it to finish, if you want to encrypt drives during your endpoint deployment process