Install Guide

ManualsBrandsDell ManualsConverged InfrastructureEndpoint Security Suite Enterprise

131

132

133

134

135

136

137

138

139

140

Table Of Contents

Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.0
Contents
Introduction
- Before You Begin
- Using This Guide
- Contact Dell ProSupport
Requirements
- All Clients
- Encryption
- Full Disk Encryption
- Encryption on Server Operating Systems
- Advanced Threat Prevention
  - Compatibility
- Client Firewall and Web Protection
- SED Manager
- BitLocker Manager
Registry Settings
- Encryption
- Full Disk Encryption
- Advanced Threat Prevention
- SED Manager
- BitLocker Manager
Install Using the Master Installer
- Install Interactively Using the Master Installer
- Install by Command Line Using the Master Installer
Uninstall the Master Installer
- Uninstall the Endpoint Security Suite Enterprise Master Installer
Install Using the Child Installers
- Install Drivers
- Install Encryption
- Install Full Disk Encryption
- Install Encryption on Server Operating System
- Install Advanced Threat Prevention Client
- Install Client Firewall and Web Protection
- Install SED Manager and PBA Advanced Authentication
- Install BitLocker Manager
Uninstall Using the Child Installers
- Uninstall Web Protection and Firewall
- Uninstall Advanced Threat Prevention
- Uninstall Full Disk Encryption
- Uninstall SED Manager
- Uninstall Encryption and Encryption on Server Operating System
- Uninstall BitLocker Manager
Data Security Uninstaller
Commonly Used Scenarios
- Encryption Client and Advanced Threat Prevention
- SED Manager and Encryption External Media
- BitLocker Manager and Encryption External Media
- BitLocker Manager and Advanced Threat Prevention
Provision a Tenant
- Provision a Tenant
Configure Advanced Threat Prevention Agent Auto Update
Pre-Installation Configuration for SED UEFI, and BitLocker Manager
- Initialize the TPM
- Pre-Installation Configuration for UEFI Computers
- Pre-Installation Configuration to Set Up a BitLocker PBA Partition
Designate the Dell Server through Registry
Extract Child Installers
Configure Key Server
- Services Panel - Add Domain Account User
- Key Server Config File - Add User for Security Management Server Communication
- Services Panel - Restart Key Server Service
- Management Console - Add Forensic Administrator
Use the Administrative Download Utility (CMGAd)
- Use Forensic Mode
- Use Admin Mode
Configure Encryption on a Server Operating System
Configure Deferred Activation
- Deferred Activation Customization
- Prepare the Computer for Installation
- Install Encryption with Deferred Activation
- Activate Encryption with Deferred Activation
- Troubleshoot Deferred Activation
Troubleshooting
- All Clients - Troubleshooting
- All Clients - Protection Status
- Dell Encryption Troubleshooting (client and server)
- Advanced Threat Prevention Troubleshooting
- SED Troubleshooting
- Dell ControlVault Drivers
  - Update Dell ControlVault Drivers and Firmware
- UEFI Computers
- TPM and BitLocker
Glossary

Constant/Value Description

TPM_E_BAD_LOCALITY

0x8028003D

The locality is incorrect for the attempted operation.

TPM_E_READ_ONLY

0x8028003E

The NV area is read only and cannot be written to.

TPM_E_PER_NOWRITE

0x8028003F

There is no protection on the write to the NV area.

TPM_E_FAMILYCOUNT

0x80280040

The family count value does not match.

TPM_E_WRITE_LOCKED

0x80280041

The NV area has already been written to.

TPM_E_BAD_ATTRIBUTES

0x80280042

The NV area attributes conflict.

TPM_E_INVALID_STRUCTURE

0x80280043

The structure tag and version are invalid or inconsistent.

TPM_E_KEY_OWNER_CONTROL

0x80280044

The key is under control of the TPM Owner and can only be

evicted by the TPM Owner.

TPM_E_BAD_COUNTER

0x80280045

The counter handle is incorrect.

TPM_E_NOT_FULLWRITE

0x80280046

The write is not a complete write of the area.

TPM_E_CONTEXT_GAP

0x80280047

The gap between saved context counts is too large.

TPM_E_MAXNVWRITES

0x80280048

The maximum number of NV writes without an owner has

been exceeded.

TPM_E_NOOPERATOR

0x80280049

No operator AuthData value is set.

TPM_E_RESOURCEMISSING

0x8028004A

The resource pointed to by context is not loaded.

TPM_E_DELEGATE_LOCK

0x8028004B

The delegate administration is locked.

TPM_E_DELEGATE_FAMILY

0x8028004C

Attempt to manage a family other than the delegated family.

TPM_E_DELEGATE_ADMIN

0x8028004D

Delegation table management not enabled.

Troubleshooting 135