partitioning - Settings for Boot Configuration Data (BCD) to install Bitlocker on Win 10

Situation: Win 10 Pro on an EVO 850 SSD drive. OS was cloned to SSD (which is new) from orig HD in the machine. TPM exists on machine, and is active. Used Samsun Magician to allow encryption (not exact wording) before cloning occurred. Wish to install Bitlocker on both drives. Tried to install on C: and got this error:

The path specified in the Boot Configuration Data (BCD) for a
Bitlocker Drive Encryption integrity-protected application is
incorrect. Please verify and correct your BCD settings and try again.

Installation on D: (a pure data drive) seems to have worked.

1. What is the correct path for this?


2. What are the correct BCD settings?


3. Is this going to require re-doing the partitions / re-installing Windows?


4. [edit] Might this be as simple as needing to do a BIOS pwd and turn on Secure Boot in the BIOS (which I turned off in the process of making the SSD the boot disk)? See question here.

I suspect that the partitions are not correct to permit this (which the BCD reference suggests), but cannot seem to verify. Partition setup, as created by Samsung cloning s/w, is:

1. Recovery


2. System (EFI System)


3. Reserved (MSR)


4. Primary (OS)

Recovery is active (i.e. reagentc was told to enable, and it's usable).