Administrator Guide
Table Of Contents
- Dell Encryption Enterprise Advanced Installation Guide v11.0
- Contents
- Introduction
- Requirements
- Registry Settings
- Install Using the Master Installer
- Uninstall the Master Installer
- Install Using the Child Installers
- Uninstall Using the Child Installers
- Data Security Uninstaller
- Commonly Used Scenarios
- Download the Software
- Pre-Installation Configuration for SED UEFI, and BitLocker Manager
- Designate the Dell Server through Registry
- Extract Child Installers
- Configure Key Server
- Use the Administrative Download Utility (CMGAd)
- Configure Encryption on a Server Operating System
- Configure Deferred Activation
- Troubleshooting
- Glossary
SED Manager and Encryption External Media
● The following example installs SED Manager, the Encryption Management Agent, and the local security console (silent
installation, no reboot, no entry in the Control Panel Programs list, installed in the default location of C:\Program
Files\Dell\Dell Data Protection\Encryption).
EMAgent_XXbit_setup.exe /s /v"CM_EDITION=1 SERVERHOST=server.organization.com
SERVERPORT=8888 SECURITYSERVERHOST=server.organization.com SECURITYSERVERPORT=8443
ARPSYSTEMCOMPONENT=1 /norestart /qn"
Then:
● The following example installs Encryption External Media only (silent installation, no reboot, installed in the default location of
C:\Program Files\Dell\Dell Data Protection).
DDPE_XXbit_setup.exe /s /v"EME=1
SERVERHOSTNAME=server.organization.com POLICYPROXYHOSTNAME=rgk.organization.com
DEVICESERVERURL=https://server.organization.com:8443/xapi/ MANAGEDDOMAIN=ORGANIZATION /
norestart /qn"
Replace DEVICESERVERURL=https://server.organization.com:8081/xapi (without the trailing forward slash) if
your Security Management Server is pre-v7.7.
BitLocker Manager and Encryption External Media
● BitLocker Manager and Encryption External Media interact based on encryption sequence. If a BitLocker Manager encrypted
drive is inserted to a computer with Encryption External Media, the BitLocker Manager password must be entered before
Encryption External Media can read and encrypt the drive.
● If Encryption External Media is active on a drive, BitLocker Manager encryption can be applied to the same drive.
● The following example installs BitLocker Manager (silent installation, no reboot, no entry in the Control Panel Programs list,
installed in the default location of C:\Program Files\Dell\Dell Data Protection).
EMAgent_XXbit_setup.exe /s /v"CM_EDITION=1 SERVERHOST=server.organization.com
SERVERPORT=8888 SECURITYSERVERHOST=server.organization.com SECURITYSERVERPORT=8443
FEATURE=BLM /norestart /qn"
Then:
● The following example installs Encryption External Media only (silent installation, no reboot, installed in the default location of
C:\Program Files\Dell\Dell Data Protection).
DDPE_XXbit_setup.exe /s /v"EME=1
SERVERHOSTNAME=server.organization.com POLICYPROXYHOSTNAME=rgk.organization.com
DEVICESERVERURL=https://server.organization.com:8443/xapi/ MANAGEDDOMAIN=ORGANIZATION /
norestart /qn"
Replace DEVICESERVERURL=https://server.organization.com:8081/xapi (without the trailing forward slash) if
your Security Management Server is pre-v7.7.
64
Commonly Used Scenarios