You boot from SD-card and then run: sudo reform-setup-encrypted-nvme
sudo reform-setup-encrypted-nvme