I have a Server 2016 box with all drives encrypted, with a USB key inserted during boot so that it auto-unlocks itself. I have secondary drives that are also encrypted with the recovery file saved on ...
Microsoft may give your encryption key to law enforcement upon valid request - here's how to keep it safe ...