Administrator Guide

ManualsBrandsDell ManualsConverged InfrastructureEncryption

Table Of Contents

Dell Encryption Enterprise Advanced Installation Guide v11.1
Contents
Introduction
- Before You Begin
- Using This Guide
- Contact Dell ProSupport
Requirements
- All Clients
- Encryption
- Full Disk Encryption
- Encryption on Server Operating Systems
- SED Manager
- BitLocker Manager
Registry Settings
- Encryption
- SED Manager
- Full Disk Encryption
- BitLocker Manager
Install Using the Master Installer
- Install Interactively Using the Master Installer
- Install by Command Line Using the Master Installer
Uninstall the Master Installer
- Uninstall the Master Installer
Install Using the Child Installers
- Install Drivers
- Install Encryption
- Install Full Disk Encryption
- Install Encryption on Server Operating System
- Install SED Manager and PBA Advanced Authentication
- Install BitLocker Manager
Uninstall Using the Child Installers
- Uninstall Encryption and Encryption on Server Operating System
- Uninstall Full Disk Encryption
- Uninstall SED Manager
- Uninstall BitLocker Manager
Data Security Uninstaller
Commonly Used Scenarios
- Encryption Client
- SED Manager (including Advanced Authentication) and Encryption Client
- SED Manager and Encryption External Media
- BitLocker Manager and Encryption External Media
Download the Software
Pre-Installation Configuration for SED UEFI, and BitLocker Manager
- Initialize the TPM
- Pre-Installation Configuration for UEFI Computers
- Pre-Installation Configuration to Set Up a BitLocker PBA Partition
Designate the Dell Server through Registry
Extract Child Installers
Configure Key Server
- Services Panel - Add Domain Account User
- Key Server Config File - Add User for Security Management Server Communication
- Services Panel - Restart Key Server Service
- Management Console - Add Forensic Administrator
Use the Administrative Download Utility (CMGAd)
- Use Forensic Mode
- Use Admin Mode
Configure Encryption on a Server Operating System
Configure Deferred Activation
- Deferred Activation Customization
- Prepare the Computer for Installation
- Install Encryption with Deferred Activation
- Activate Encryption with Deferred Activation
- Troubleshoot Deferred Activation
Troubleshooting
- All Clients - Troubleshooting
- All Clients - Protection Status
- Dell Encryption Troubleshooting (client and server)
- SED Troubleshooting
- Dell ControlVault Drivers
  - Update Dell ControlVault Drivers and Firmware
- UEFI Computers
- TPM and BitLocker
Glossary

Non-UEFI

PBA

Password Fingerprint Contacted Smart

card

SIPR Card

1. Available when authentication drivers are downloaded from dell.com/support

2. Available with a supported OPAL SED

UEFI

PBA - on supported Dell Computers

Password Fingerprint Contacted Smart

card

SIPR Card

Windows 7

Windows 8.1 X

Windows 10 X

1. Available with a supported OPAL SED on supported UEFI computers

International Keyboards

The following table lists international keyboards supported with Pre-boot Authentication on UEFI and non-UEFI computers.

International Keyboard Support - UEFI

DE-FR - (French Swiss) EN-GB - English (British English)

DE-CH - (German Swiss) EN-CA - English (Canadian English)

EN-US - English (American

English)

International Keyboard Support - Non-UEFI

AR - Arabic (using Latin letters) EN-US - English (American English)

DE-FR - (French Swiss) EN-GB - English (British English)

DE-CH - (German Swiss) EN-CA - English (Canadian English)

Operating Systems

● The following table details the supported operating systems.

Windows Operating Systems (32- and 64-bit)

○ Windows 7 SP0-SP1: Enterprise, Professional, Ultimate (supported with Legacy Boot mode but not UEFI)

NOTE:

NVMe self-encrypting drives are not supported with Windows 7.

○ Windows 8.1: Enterprise, Pro

○ Windows 10: Education, Enterprise, Pro v1803-v21H1 (April 2018 Update/Redstone 4 - May 2021 Update/21H1)

Requirements 17