1) Press the windows key and R and type gpedit.msc and click OK

2) Go to Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > BitLocker Drive Encryption > Operating System Drives
And double-click the “Require additional authentication at startup” option

3) Enable and tick both to allow BitLocker without a compatible TPM