Administrator Guide

size <op> <size specifier>

<size specifier> is of the form decimal integer with an optional suffix from {K, M, G, T} aligned on 1000, not 1024. For

example, to exclude media or a drive greater than 500000000 bytes from Encryption External Media, use one of these:

size >= 500000000

size >= 500000K

size >= 500M

● File system type

Whitelist rule:

fstype=<fstype>

<fstype> can be ExFAT, FAT, or HFS+

To exclude both, here is an example for 1TB and greater HFS+ media:

size>=1T;fstype=HFS+

Recovery

Occasionally, you may need access to data on encrypted disks. As a Dell administrator, you can access encrypted disks without

decrypting them, saving you valuable time.

You might need to access a user's encrypted data for many reasons, but a few common use cases are as follows:

● Someone leaves the company, and no one knows the password.

● A user cannot recall the password.

This section guides you through the process of using FileVault Recovery when FileVault encryption is on the endpoint to be

recovered. FileVault can be used with the Encryption client running on macOS Sierra 10.12.6. FileVault recovery is also used on

Fusion Drives.

Mount Volume

Prerequisites

● An unencrypted external recovery volume or computer to run the recovery utility

● A FireWire or Thunderbolt cable, depending on your hardware

● The Device ID/Unique ID of the computer targeted for recovery - In most cases, you can find the computer targeted for

recovery in the Management Console by searching for the owner's user name and viewing the devices encrypted for that

user. The format of the Unique ID/Device ID is "John Doe's MacBook.Z4291LK58RH".

● The Dell installation media

Process

1. As a Dell administrator, log in to the Management Console.

2. In the left pane, click Management > Recover Endpoint.

3. In Search, enter the fully qualified domain name of the endpoint to recover and click the search icon.

4. Click the device's Recover link.

5. If the endpoint requires enhanced recovery, a prompt for a password displays. Assign a new password to the encryption key

bundle that you are about to download.

NOTE:

You must remember this password to access the recovery keys.

6. To save the recovery bundle to the external recovery volume or computer to run the recovery utility to perform the recovery

operation, click Download and click Save.

Tasks for the Encryption Client