Reference Guide

Security Management Server Virtual v10.2.11 AdminHelp

Application Data Encryption List

Managed Services

Removable Media Encryption > Windows

Media Encryption

EMS Device Whitelist

EMS Access Code Required Message

EMS Access Code Failed Message

Endpoints Level

Technology Group Policy

Windows Encryption > Self-

Encrypting Drive

(SED)

Support Information Text

PBA Title Text

Legal Notice Text

Self Help Questions (Pre-8.0 clients)

Windows Encryption > Policy-Based

Encryption

Common Encrypted Folders

OS Update Encryption Rules

Windows Encryption > BitLocker Encryption

Default Folder Location to Save Recovery

Password

Windows Encryption

A word about types of encryption: SDE is designed to encrypt the operating system and program files.

To accomplish this purpose, SDE must be able to open its encryption key while the operating system is

booting without intervention of a password by the user. Its intent is to prevent alteration or offline attacks

on the operating system by an attacker. SDE is not intended for user data. Common and User key

encryption are intended for sensitive user data because they require a user password to unlock

encryption keys.

Policy descriptions also display in tooltips in the Management Console. In this table, master policies are

in bold font.

Policy Default Setting Description

Full Disk Encryption (FDE)

121