Reference Guide

Security Management Server v10.2.11 AdminHelp
first, are AES 128, AES 256.
NOTE: This policy applies to Dell Encryption, not
FileVault encryption.
Firmware Password Mode Required
Required, Optional
Specify if the firmware password in older hardware is
optional or required for Dell Volume Encryption.
FileVault 2 Policy Conflict
Behavior
Ignore
Ignore, Report, Convert
Specify behavior when volume is Dell encrypted and
policy is for FV2 encryption.
Ignore –
Default behavior, Dell encrypted volumes are
reported as protected if the policy requires FV2
encryption.
Report – Conflicted volumes are reported as
unprotected.
Convert –
Dell encrypted volumes are converted to FV2
volumes and reported as unprotected while converting.
See basic settings
Mac Global Settings
This technology defines Mac encryption behavior, including targeted volumes, polling intervals, and
restart policies.
Max Password Delay 300
0-32400 seconds
Limits the maximum delay in seconds that can be set
in the system preferences “max password delay after
screen saver or sleep” of the Security panel.
Delay Authentication Not Selected
If Selected, users are not prompted to activate or
authenticate to the Dell Server until required, such
as to use media encrypted with Encryption External
Media.
No Auth User List Dictionary
Users matching this dictionary are not required to
activate or authenticate to the Dell Server.
Example:
<key>NoAuthenticateUsers</key>
<dict>
<key>dsAttrTypeStandard:AuthenticationAuthority</key>
<string>;Kerberosv5;;@students.school.edu;
students.school.edu</string>
</dict>
FileVault 2 PBA User List Dictionary
Users matching this dictionary are allowed to add
themselves to FileVault Preboot Authentication.
Example:
<key>FV2PBAUsers</key>
<dict>
<key>dsAttrTypeStandard:AuthenticationAuthority</key>
<string>;Kerberosv5;;*@students.school.edu;
students.school.edu*</string>
</dict>
Port Control
Port Control
Policy descriptions also display in tooltips in the Management Console. In this table, master policies are
in bold font.
Policy Default Setting Description
265