Users Guide

Technical Advisories v8.6
Encryption
● Added 09/2015 - In order to add new features, functionality, and the newest operating systems, Personal Edition will support
Windows XP through Shield version 8.5.
● Added 08/2015 - If Microsoft TPM Base Services is improperly installed, the following functionality is affected: HCA
provisioning, fingerprint enrollment in the DDP Console/Security Console, and BitLocker Manager operation. For more
information and to work around this issue, refer to this KB article: http://www.dell.com/support/article/us/en/19/
SLN296706. [CSF-454]
● During Configuring for Encryption, if the user selects a backup location that becomes unavailable or to which the user loses
write permissions before setup is complete, the Setup Wizard continues to prompt for a valid location even after such a
location is entered. To work around this issue, close the Setup Wizard and launch the system tray application again. When
prompted, enter a valid backup location. [DDPC-764]
● If HCA policy is disabled or the HCA encryption algorithm is changed during encryption, the computer may experience a blue
screen after reboot or at PBA logon. [DDPMTR-282]
● During SDE encryption, a popup notification displays to prompt the user to cancel encryption when an application is
waiting for encryption of a file to complete. If this occurs rapidly during a short length of time, multiple notifications may
simultaneously display. [DDPMTR-943]
● When Encryption with Deferred Activation is installed but not activated, the user cannot uninstall and reinstall a different
DDP edition. Because activation did not occur, retrieval of encryption keys and decryption are not possible. A different DDP
edition cannot overwrite the deferred activation Encryption client. [DDPMTR-944]
● Due to Microsoft's change in the way Windows handles stopping a critical service, stopping a DDP service such as
CMGShield service, EMS service, or the Dell Data Protection | Encryption process in Task Manager will result in the
computer experiencing a blue screen. [DDPMTR-945]
● In Windows 10, when using EMS Explorer to open a 5GB file on encrypted removable media an error displays, "The... file is
too large for notepad," and the file does not open. [DDPMTR-990]
● When opening a file on encrypted removable media through EMS Explorer on a non-Shielded computer, if the removable
media is removed without being ejected, the file remains in the computer's Ems Explorer Temporary Files folder in clear text
after the file is closed. Properly ejecting the removable media properly removes these clear-text files. [DDPMTR-1157]
● After recovery of a computer running Windows 10 with HCA policy enabled, if HCA policy is then disabled the computer
experiences a blue screen rather than decrypting as expected. [DDPMTR-1303]
Advanced Authentication
● When a user begins credential enrollment but quits without saving before enrollment is complete, the credentials are enrolled
rather than discarded. To work around this issue, if policy allows the user to modify their own credentials, the user can open
the DDP Console, select the Enrollments tile, select and delete the credentials. Otherwise, an administrator must remove
them. [CSF-146]
● During activation, if the selected backup location is not available, the user cannot set a new backup location in the activation
dialog but must instead set the new location through Administrator Settings > Backup Location before activation can
proceed. [CSF-238]
● Password Manager does not support the Windows 10 web browser, Microsoft Edge. [CSF-281]
● When running on Windows 10, the DDP Console About window displays incorrect BIOS information and an incorrect serial
number for the computer's motherboard. [CSF-291, CSF-301]
● When a contactless smart card is moved across the card reader, a popup notification prompts the user to enroll the smart
card. If the card is moved multiple times in a short length of time, multiple popup notifications may simultaneously display.
[CSF-293]
● On Windows 10, if the Validity Fingerprint Sensor driver is out-of-date, when PBA is activated, the computer experiences a
blue screen. To work around this issue, ensure that PBA is not enabled by policy, then follow these steps:
1. Install Dell Data Protection then reboot.
2. In Windows Control Panel, navigate to Device Manager.
3. Under Biometric Devices, disable the Validity Fingerprint Sensor.
4. Activate the PBA.
5. After reboot, the Validity Fingerprint Sensor can be re-enabled, and the fingerprint reader functions as expected.
To download the latest Validity Fingerprint Sensor driver, go to http://www.dell.com/support/home/us/en/19/Products/?
app=drivers and select your computer model to check and download the latest driver.
Technical Advisories
47