Install Guide
Table Of Contents
- Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.0
- Contents
- Introduction
- Requirements
- Registry Settings
- Install Using the Master Installer
- Uninstall the Master Installer
- Install Using the Child Installers
- Uninstall Using the Child Installers
- Data Security Uninstaller
- Commonly Used Scenarios
- Provision a Tenant
- Configure Advanced Threat Prevention Agent Auto Update
- Pre-Installation Configuration for SED UEFI, and BitLocker Manager
- Designate the Dell Server through Registry
- Extract Child Installers
- Configure Key Server
- Use the Administrative Download Utility (CMGAd)
- Configure Encryption on a Server Operating System
- Configure Deferred Activation
- Troubleshooting
- Glossary
Prerequisite
○ In January 2020, SHA1 signing certificates are no longer valid and cannot be renewed. Devices running Windows
7 or Windows Server 2008 R2 must install Microsoft KBs https://support.microsoft.com/help/4474419 and
https://support.microsoft.com/help/4490628 to validate SHA256 signing certificates on applications and installation
packages.
Applications and installation packages signed with SHA1 certificates will function but an error will display on the
endpoint during installation or execution of the application without these updates installed
●
NOTE: A password is required with pre-boot authentication. Dell recommends a minimum password setting compliant
with internal security policies.
●
NOTE: When PBA is used, the Sync All Users policy should be enabled if a computer has multiple users. Additionally, all
users must have passwords. Zero-length password users will be locked out of the computer following activation.
●
NOTE: Computers protected by Full Disk Encryption must be updated to Windows 10 v1703 (Creators Update/Redstone
2) or later before updating to Windows 10 v1903 (May 2019 Update/19H1) or later. If this upgrade path is attempted, an
error message displays.
NOTE: Full Disk Encryption must be configured with Encryption Algorithm set to AES-256 and Encryption Mode set to
CBC.
NOTE: In-place operating system upgrades to a newer version - such as Windows 7 or Windows 8.1 - to Windows 10 is not
supported.
Hardware
● The following table details supported hardware.
Optional Embedded Hardware
○ TPM 1.2 or 2.0
Authentication Options with Full Disk Encryption Client
● Specific hardware is required, to use smart cards and to authenticate on UEFI computers. Configuration is required to use
smart cards with pre-boot authentication. The following tables show authentication options available by operating system,
when hardware and configuration requirements are met.
Non-UEFI
PBA
Password Fingerprint Contacted Smart
card
SIPR Card
Windows 7 SP0-SP1 X
1
X
1 2
1. Available when authentication drivers are downloaded from support.dell.com.
UEFI
PBA - on supported Dell Computers
Password Fingerprint Contacted Smart
card
SIPR Card
Windows 10 X
1
X
1
12 Requirements