Administrator Guide

ManualsBrandsDell ManualsConverged InfrastructureEncryption

<string>ignore</string> [For handling Mac OS Extended media. Possible values are

ignore, provisioningRejected, or unshieldable. ignore - the media is usable

(default). provisioningRejected - retains the value in the Dell Server policy, EMS

Access to unShielded Media. unshieldable - If the EMS Access to unShielded Media

policy is set to Block, the media is ejected. If the EMS Access to unShielded Media

policy is not set to Block, it is usable as provisioningRejected. The key and value

are case sensitive.]

<key>ClientActivationTimeout</key>

<integer>120</integer> [Range: 5 to 300, inclusive. The default value is 30. The

time in seconds to give the Security Server time to respond to an activation attempt

before giving up. This plist value is valid for clients running v8.6.0.6627 or later.]

</dict>

</plist>

5. Save and close the .plist file.

6. For each targeted computer, copy the package to a temp folder and the com.dell.ddp.plist file to /Library/Preferences.

7. Perform a command line installation of the package using the installer command:

sudo installer -pkg "Install Dell Encryption Enterprise.pkg" -target /

8. Restart the computer using the following command line: sudo shutdown -r now

NOTE:

System Integrity Protection (SIP) was hardened in macOS High Sierra (10.13) to require users to approve new third-

party kernel extension. For information on allowing kernel extensions on macOS High Sierra, see KB article SLN307814.

9. Continue to Activate Enterprise Edition for Mac.

macOS 10.15 and higher with removable media

If an enterprise uses removable media with macOS 10.15 and higher, users must enable full disk access for external media. For

more information, see Enable Full Disk Access for Removable Media.

Enable Full Disk Access for Removable Media

If an enterprise uses removable media with macOS 10.15 and higher, users must enable full disk access for external media. Users

see one of these prompts:

● After you install the client software, a prompt displays stating that you must provide Full Disk Access consent for external

media. Click the Go to Security and Privacy button and continue the steps below.

● If not prompted after installation, users are prompted to enable full disk access when they first mount the removable media.

A message displays, stating either that Dell Encryption External Media or EMS Explorer would like to access files on a

removable volume. Click OK, and continue the steps below.

For more information, see KB article SLN319972.

1. In System Preferences > Security and Privacy, click the Privacy tab.

2. In the left pane, select Full Disk Access.

The Dell Encryption External Media app does not display.

3. At the bottom, click the lock icon and provide credentials for a local administrator account.

In the left pane > Files and Folders, the user can check the external media (EMS) components to provide the required

permissions.

4. In the left pane, select Full Disk Access.

The Dell Encryption External Media app now displays. However, when the request for approval is pending the check box for

that app is not selected.

5. Grant permission by selecting the check box.

If the Dell Encryption External Media app does not display:

a. Click the plus icon (+) in the right pane.

b. Go to /Library/Dell/EMS, and select Dell Encryption External Media.

c. Click Open.

d. In Full Disk Access, select the checkbox for Dell Encryption External Media.

6. Close Security and Privacy.

Tasks for the Encryption Client