Install Guide

msiexec.exe /i "Dell Data Protection Encryption.msi" /qn REBOOT="ReallySuppress"

SERVERMODE="1" SERVERHOSTNAME="server.organization.com"

POLICYPROXYHOSTNAME="rgk.organization.com" MANAGEDDOMAIN="ORGANIZATION"

DEVICESERVERURL="https://server.organization.com:8443/xapi/"

● The following example installs Encryption in server operating system mode with a log file and default parameters (Encryption,

silent installation, Encrypt for Sharing, no dialogue, no progress bar, no restart, installed in the default location of

C:\Program Files\Dell\Dell Data Protection\Encryption) and specifies a custom log file name ending with

a number (DDP_ssos-090.log) that is incremented if the command line is run more than once on the same server. To specify

a log location other than the default location where the executable is located, provide the complete path in the command.

For example, /l*v C:\Logs\DDP_ssos-090.log creates install logs in C:\Logs.

DDPE_XXbit_setup.exe /s /v"SERVERMODE=1 SERVERHOSTNAME=server.organization.com

POLICYPROXYHOSTNAME=rgk.organization.com MANAGEDDOMAIN=ORGANIZATION

DEVICESERVERURL=https://server.organization.com:8443/xapi/ /l*v DDP_ssos-090.log /

norestart/qn"

MSI Command:

msiexec.exe /i "Dell Data Protection Encryption.msi" /qn SERVERMODE="1"

SERVERHOSTNAME="server.organization.com" POLICYPROXYHOSTNAME="rgk.organization.com"

MANAGEDDOMAIN="ORGANIZATION" DEVICESERVERURL="https://server.organization.com:8443/

xapi/" /l*v DDP_ssos-090.log /norestart/qn"

Restart the computer after installation. Dell recommends snoozing the reboot only if time is needed to save your work and close

applications. Encryption cannot begin until the computer has rebooted.

Activate

● Ensure that the computer name of the server is the endpoint name to display in the Management Console.

● An interactive user with domain administrator credentials must log on to the server at least once for the purpose of the initial

activation. The logged on user can be of any type - domain or non-domain, remote desktop-connected or interactive user at

the server, but activation requires domain administrator credentials.

● Following the restart after installation, the Activation dialog displays. The administrator must enter domain administrator

credentials with a user name in User Principal Name (UPN) format. Encryption of server operating systems does not activate

automatically.

● During initial activation, a virtual server user account is created. After initial activation, the computer is restarted so that

device activation can begin.

● During the authentication and device activation phase, the computer is assigned a unique Machine ID, encryption keys are

created and bundled, and a relationship is established between the encryption key bundle and the virtual server user. The

encryption key bundle associates the encryption keys and policies with the new virtual server user to create an unbreakable

relationship between the encrypted data, the specific computer, and the virtual server user. After device activation, the

virtual server user displays in the Management Console as SERVER-USER@<fully qualified server name>. For more

information about activation, see Activation on a Server Operating System.

NOTE:

If you rename the server after activation, its display name does not change in the Management Console. However, if

Encryption of server operating systems activates again after the server name is changed, the new server name will then

display in the Management Console.

An Activation dialog displays once after each restart to prompt the user to activate Encryption on a server operating system. To

complete activation, follow these steps:

1. Log on to the server either at the server or through Remote Desktop Connection.

2. Enter the user name of a domain administrator in UPN format and password and click Activate. This is the same Activation

dialog that displays each time an unactivated system is restarted.

Install Using the Child Installers