Administrator Guide
Table Of Contents
- Dell Encryption Enterprise Advanced Installation Guide v11.1
- Contents
- Introduction
- Requirements
- Registry Settings
- Install Using the Master Installer
- Uninstall the Master Installer
- Install Using the Child Installers
- Uninstall Using the Child Installers
- Data Security Uninstaller
- Commonly Used Scenarios
- Download the Software
- Pre-Installation Configuration for SED UEFI, and BitLocker Manager
- Designate the Dell Server through Registry
- Extract Child Installers
- Configure Key Server
- Use the Administrative Download Utility (CMGAd)
- Configure Encryption on a Server Operating System
- Configure Deferred Activation
- Troubleshooting
- Glossary
The following example enables installation of Dell Encryption over an existing Full Disk Encryption installation with default
parameters (Encryption client, Encrypt for Sharing, no dialogue, no progress bar, automatic restart, installed in the default
location of C:\Program Files\Dell\Dell Data Protection\Encryption) and installation logs in C:\Dell.
Note: For successful log generation, the directory C:\Dell must exist prior to installation.
DDPE_XXbit_setup.exe /s /v"SERVERHOSTNAME=server.organization.com
POLICYPROXYHOSTNAME=rgk.organization.com MANAGEDDOMAIN=ORGANIZATION
DEVICESERVERURL=https://server.organization.com:8443/xapi/ ENABLE_FDE_LM=1 /
norestart /qn /l*v C:\Dell\DellEncryptionInstall.log"
NOTE: Some older versions may require escape characters of \" around the values of parameters. For example:
DDPE_XXbit_setup.exe /v"CMG_DECRYPT=\"1\" CMGSILENTMODE=\"1\" DA_SERVER=\"server.organization.com\"
DA_PORT=\"8050\" SVCPN=\"administrator@organization.com\" DA_RUNAS=\"domain\username\"
DA_RUNASPWD=\"password\" /qn
Install Full Disk Encryption
● Review Full Disk Encryption Requirements if your organization is using a certificate signed by a root authority, such as
EnTrust or Verisign. A registry setting change is needed on the client computer to enable SSL/TLS trust validation.
● Users log in to the PBA using their Windows credentials.
Command Line Installation
● The following table details the parameters available for the installation.
Parameters
CM_EDITION=1 (remote management)
INSTALLDIR=(change the installation destination)
SERVERHOST=(securityserver.organization.com)
SERVERPORT=8888
SECURITYSERVERHOST=(securityserver.organization.com)
SECURITYSERVERPORT=8443
FEATURE=FDE
ENABLE_FDE_LM=1 (Allows installation of Full Disk Encryption on a computer with active Dell Encryption)
For a list of basic .msi switches and display options that can be used in command lines, refer to Install Using the Child
Installers.
Example Command Line
Encryption Management Agent
● The following example installs remotely managed Full Disk Encryption (silent installation, no reboot, installed in the default
location of C:\Program Files\Dell\Dell Data Protection\Encryption).
EMAgent_64bit_setup.exe /s /v"CM_EDITION=1 FEATURE=FDE SERVERHOST=server.organization.com
SERVERPORT=8888 SECURITYSERVERHOST=server.organization.com SECURITYSERVERPORT=8443 /
norestart /qn"
● Encryption Management Agent
● The following example installs remotely managed Full Disk Encryption and allows installation on a Dell Encryption protected
computer (silent installation, no reboot, installed in the default location of C:\Program Files\Dell\Dell Data
Protection\Encryption).
Install Using the Child Installers
39