Install Guide

ManualsBrandsDell ManualsConverged InfrastructureEndpoint Security Suite Enterprise

131

132

133

134

135

136

137

138

139

140

Table Of Contents

Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.0
Contents
Introduction
- Before You Begin
- Using This Guide
- Contact Dell ProSupport
Requirements
- All Clients
- Encryption
- Full Disk Encryption
- Encryption on Server Operating Systems
- Advanced Threat Prevention
  - Compatibility
- Client Firewall and Web Protection
- SED Manager
- BitLocker Manager
Registry Settings
- Encryption
- Full Disk Encryption
- Advanced Threat Prevention
- SED Manager
- BitLocker Manager
Install Using the Master Installer
- Install Interactively Using the Master Installer
- Install by Command Line Using the Master Installer
Uninstall the Master Installer
- Uninstall the Endpoint Security Suite Enterprise Master Installer
Install Using the Child Installers
- Install Drivers
- Install Encryption
- Install Full Disk Encryption
- Install Encryption on Server Operating System
- Install Advanced Threat Prevention Client
- Install Client Firewall and Web Protection
- Install SED Manager and PBA Advanced Authentication
- Install BitLocker Manager
Uninstall Using the Child Installers
- Uninstall Web Protection and Firewall
- Uninstall Advanced Threat Prevention
- Uninstall Full Disk Encryption
- Uninstall SED Manager
- Uninstall Encryption and Encryption on Server Operating System
- Uninstall BitLocker Manager
Data Security Uninstaller
Commonly Used Scenarios
- Encryption Client and Advanced Threat Prevention
- SED Manager and Encryption External Media
- BitLocker Manager and Encryption External Media
- BitLocker Manager and Advanced Threat Prevention
Provision a Tenant
- Provision a Tenant
Configure Advanced Threat Prevention Agent Auto Update
Pre-Installation Configuration for SED UEFI, and BitLocker Manager
- Initialize the TPM
- Pre-Installation Configuration for UEFI Computers
- Pre-Installation Configuration to Set Up a BitLocker PBA Partition
Designate the Dell Server through Registry
Extract Child Installers
Configure Key Server
- Services Panel - Add Domain Account User
- Key Server Config File - Add User for Security Management Server Communication
- Services Panel - Restart Key Server Service
- Management Console - Add Forensic Administrator
Use the Administrative Download Utility (CMGAd)
- Use Forensic Mode
- Use Admin Mode
Configure Encryption on a Server Operating System
Configure Deferred Activation
- Deferred Activation Customization
- Prepare the Computer for Installation
- Install Encryption with Deferred Activation
- Activate Encryption with Deferred Activation
- Troubleshoot Deferred Activation
Troubleshooting
- All Clients - Troubleshooting
- All Clients - Protection Status
- Dell Encryption Troubleshooting (client and server)
- Advanced Threat Prevention Troubleshooting
- SED Troubleshooting
- Dell ControlVault Drivers
  - Update Dell ControlVault Drivers and Firmware
- UEFI Computers
- TPM and BitLocker
Glossary

Constant/Value Description

TPM_E_MA_AUTHORITY

0x8028005F

Incorrect migration authority.

TPM_E_PERMANENTEK

0x80280061

Attempt to revoke the EK and the EK is not revocable.

TPM_E_BAD_SIGNATURE

0x80280062

Bad signature of CMK ticket.

TPM_E_NOCONTEXTSPACE

0x80280063

There is no room in the context list for additional contexts.

TPM_E_COMMAND_BLOCKED

0x80280400

The command was blocked.

TPM_E_INVALID_HANDLE

0x80280401

The specified handle was not found.

TPM_E_DUPLICATE_VHANDLE

0x80280402

The TPM returned a duplicate handle and the command

needs to be resubmitted.

TPM_E_EMBEDDED_COMMAND_BLOCKED

0x80280403

The command within the transport was blocked.

TPM_E_EMBEDDED_COMMAND_UNSUPPORTED

0x80280404

The command within the transport is not supported.

TPM_E_RETRY

0x80280800

The TPM is too busy to respond to the command

immediately, but the command could be resubmitted at a

later time.

TPM_E_NEEDS_SELFTEST

0x80280801

SelfTestFull has not been run.

TPM_E_DOING_SELFTEST

0x80280802

The TPM is currently executing a full self test.

TPM_E_DEFEND_LOCK_RUNNING

0x80280803

The TPM is defending against dictionary attacks and is in a

time-out period.

TBS_E_INTERNAL_ERROR

0x80284001

An internal software error has been detected.

TBS_E_BAD_PARAMETER

0x80284002

One or more input parameters is bad.

TBS_E_INVALID_OUTPUT_POINTER

0x80284003

A specified output pointer is bad.

TBS_E_INVALID_CONTEXT

0x80284004

The specified context handle does not refer to a valid

context.

Troubleshooting 137