manage-bde -protectors -add Volume {-ForceUpgrade} {-RecoveryPassword|-rp} NumericalPassword {-RecoveryKey|-rk} PathToExternalKeyDirectory ...

manage-bde -protectors -add Volume
                [{-ForceUpgrade}]
                [{-RecoveryPassword|-rp} [NumericalPassword]]
                [{-RecoveryKey|-rk} PathToExternalKeyDirectory]
                [{-StartupKey|-sk} PathToExternalKeyDirectory]
                [{-Certificate|-cert} {-cf PathToCertificateFile|
                                       -ct CertificateThumbprint}]
                [-TPM]
                [{-TPMAndPIN|-tp}]
                [{-TPMAndStartupKey|-tsk} PathToExternalKeyDirectory]
                [{-TPMAndPINAndStartupKey|-tpsk} -tsk
                    PathToExternalKeyDirectory]
                [{-Password|-pw}]
                [{-ADAccountOrGroup|-sid} {SID|domain\user|domain\group}
                    [-service]}]
                [{-ComputerName|-cn} ComputerName]
                [{-?|/?}] [{-Help|-h}]

Description:
    Adds key protection methods.

Parameter List:
    Volume      A drive letter followed by a colon, a volume GUID path or
                a mounted volume. Example: "C:",
                \\?\Volume{26a21bda-a627-11d7-9931-806e6f6e6963}\ or
                "C:\MountVolume"
    -ForceUpgrade
                Forces the BitLocker version to be upgraded.
    -RecoveryPassword or -rp
                Adds a Numerical Password protector.
    -RecoveryKey or -rk
                Adds an External Key protector for recovery.
    -StartupKey or -sk
                Adds an External Key protector for startup.
    -Certificate or -cert
                Adds a public key protector for the data volume.
    -TPMAndPIN or -tp
                Adds a TPM And PIN protector for the OS volume.
    -TPMAndStartupKey or -tsk
                Adds a TPM And Startup Key protector for the OS volume.
    -TPMAndPINAndStartupKey or -tpsk
                Adds a TPM And PIN And Startup Key protector for the OS volume.
    -tpm        Adds a TPM protector for the OS volume.
    -Password or -pw
                Adds a password key protector for the volume.
    -ADAccountOrGroup or -sid
                Adds a SID-based Identity protector for the volume.
    -ComputerName or -cn
                Runs on another computer. Examples: "ComputerX", "127.0.0.1"
    -? or /?    Displays brief help. Example: "-ParameterSet -?"
    -Help or -h Displays complete help. Example: "-ParameterSet -h"

Examples:
    manage-bde -protectors -add e: -RecoveryPassword
    manage-bde -protectors -add e: -rp -rk h:\
    manage-bde -protectors -add e: -TPMAndPIN
    manage-bde -protectors -add e: -Certificate -cf
        "c:\File Folder\Filename.cer"
    manage-bde -protectors -add e: -pw
    manage-bde -protectors -add e: -sid Domain\User
    manage-bde -protectors -add e: -sid Domain\Machine$ -service