Administrator Guide

The Management Console lists Mac policies in these technology groups:
● Mac Encryption
● Removable Media Encryption
Policies that you set depend on the encryption requirements of your enterprise.
This table lists the policy options.
Mac Encryption > Dell Volume Encryption
For High Sierra and higher, both of these policies must be enabled. For Sierra and earlier, see previous versions of the
documentation.
Dell Volume Encryption On or Off
This is the "master policy" for all other Dell Volume Encryption policies. This policy
must be set to On for any other Dell Volume Encryption policies to be applied.
On enables encryption and initiates encryption for unencrypted volumes, per the
Volumes Targeted for Encryption or Encrypt Using FileVault for Mac policy. The
default setting is On.
Off disables encryption and initiates a decryption sweep for any fully or partially
encrypted volumes.
Encrypt Using FileVault for Mac If you plan to use FileVault encryption, be sure to first set Dell Volume Encryption to
On.
Ensure that the Encrypt Using FileVault for Mac policy is selected in the Management
Console.
When enabled, FileVault is used to encrypt the System Volume including Fusion
Drives, based on the Volumes Targeted for Encryption policy setting.
Mac Encryption > Mac Global Settings
Volumes Targeted for Encryption System Volume Only or All Fixed Volumes
System Volume Only secures only the currently running system volume.
All Fixed Volumes secures all Mac OS Extended Volumes on all fixed disks, along
with the currently running system volume.
3. For descriptions of all the policies, see AdminHelp which is available from the Management Console. To locate a specific
policy in AdminHelp:
a. Click the Search icon.
b. In Search, enter the policy name with quotes.
c. Click the topic link that displays. The policy name that you entered in quotes is highlighted in the topic.
4. Click the System Volumes tab to view the status of the volumes targeted for encryption.
State
Description
Excluded The volume is excluded from encryption. This applies to unencrypted volumes when
encryption is disabled, external volumes, volumes with formats other than Mac OS X
Extended (Journaled), and non-system volumes when the Volumes Targeted for
Encryption policy is set to System Volume Only.
Preparing volume for encryption The client software is currently initiating the encryption process for the volume but
has not begun the encryption sweep.
Volume cannot be resized The client software cannot start encryption because the Volume cannot be resized
appropriately. After receiving this message, contact Dell ProSupport and provide the
log files.
Tasks for the Encryption Client 17