Install Guide

ManualsBrandsDell ManualsConverged InfrastructureEndpoint Security Suite Enterprise

151

152

153

154

155

156

157

158

159

160

Table Of Contents

Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.0
Contents
Introduction
- Before You Begin
- Using This Guide
- Contact Dell ProSupport
Requirements
- All Clients
- Encryption
- Full Disk Encryption
- Encryption on Server Operating Systems
- Advanced Threat Prevention
  - Compatibility
- Client Firewall and Web Protection
- SED Manager
- BitLocker Manager
Registry Settings
- Encryption
- Full Disk Encryption
- Advanced Threat Prevention
- SED Manager
- BitLocker Manager
Install Using the Master Installer
- Install Interactively Using the Master Installer
- Install by Command Line Using the Master Installer
Uninstall the Master Installer
- Uninstall the Endpoint Security Suite Enterprise Master Installer
Install Using the Child Installers
- Install Drivers
- Install Encryption
- Install Full Disk Encryption
- Install Encryption on Server Operating System
- Install Advanced Threat Prevention Client
- Install Client Firewall and Web Protection
- Install SED Manager and PBA Advanced Authentication
- Install BitLocker Manager
Uninstall Using the Child Installers
- Uninstall Web Protection and Firewall
- Uninstall Advanced Threat Prevention
- Uninstall Full Disk Encryption
- Uninstall SED Manager
- Uninstall Encryption and Encryption on Server Operating System
- Uninstall BitLocker Manager
Data Security Uninstaller
Commonly Used Scenarios
- Encryption Client and Advanced Threat Prevention
- SED Manager and Encryption External Media
- BitLocker Manager and Encryption External Media
- BitLocker Manager and Advanced Threat Prevention
Provision a Tenant
- Provision a Tenant
Configure Advanced Threat Prevention Agent Auto Update
Pre-Installation Configuration for SED UEFI, and BitLocker Manager
- Initialize the TPM
- Pre-Installation Configuration for UEFI Computers
- Pre-Installation Configuration to Set Up a BitLocker PBA Partition
Designate the Dell Server through Registry
Extract Child Installers
Configure Key Server
- Services Panel - Add Domain Account User
- Key Server Config File - Add User for Security Management Server Communication
- Services Panel - Restart Key Server Service
- Management Console - Add Forensic Administrator
Use the Administrative Download Utility (CMGAd)
- Use Forensic Mode
- Use Admin Mode
Configure Encryption on a Server Operating System
Configure Deferred Activation
- Deferred Activation Customization
- Prepare the Computer for Installation
- Install Encryption with Deferred Activation
- Activate Encryption with Deferred Activation
- Troubleshoot Deferred Activation
Troubleshooting
- All Clients - Troubleshooting
- All Clients - Protection Status
- Dell Encryption Troubleshooting (client and server)
- Advanced Threat Prevention Troubleshooting
- SED Troubleshooting
- Dell ControlVault Drivers
  - Update Dell ControlVault Drivers and Firmware
- UEFI Computers
- TPM and BitLocker
Glossary

Constant/Value Description

FVE_E_POLICY_STARTUP_KEY_NOT_ALLOWED

0x80310062

Group policy settings do not permit the use of a startup key.

Please choose a different BitLocker startup option.

FVE_E_POLICY_STARTUP_KEY_REQUIRED

0x80310063

Group policy settings require the use of a startup key.

Please choose this BitLocker startup option.

FVE_E_POLICY_STARTUP_PIN_KEY_NOT_ALLOWED0x8

0310064

Group policy settings do not permit the use of a startup key

and PIN. Please choose a different BitLocker startup option.

FVE_E_POLICY_STARTUP_PIN_KEY_REQUIRED

0x80310065

Group policy settings require the use of a startup key and

PIN. Please choose this BitLocker startup option.

FVE_E_POLICY_STARTUP_TPM_NOT_ALLOWED

0x80310066

Group policy does not permit the use of TPM-only at

startup. Please choose a different BitLocker startup option.

FVE_E_POLICY_STARTUP_TPM_REQUIRED

0x80310067

Group policy settings require the use of TPM-only at

startup. Please choose this BitLocker startup option.

FVE_E_POLICY_INVALID_PIN_LENGTH

0x80310068

The PIN provided does not meet minimum or maximum

length requirements.

FVE_E_KEY_PROTECTOR_NOT_SUPPORTED

0x80310069

The key protector is not supported by the version of

BitLocker Drive Encryption currently on the drive. Upgrade

the drive to add the key protector.

FVE_E_POLICY_PASSPHRASE_NOT_ALLOWED

0x8031006A

Group policy settings do not permit the creation of a

password.

FVE_E_POLICY_PASSPHRASE_REQUIRED

0x8031006B

Group policy settings require the creation of a password.

FVE_E_FIPS_PREVENTS_PASSPHRASE

0x8031006C

The group policy setting requiring FIPS compliance

prevented the password from being generated or used.

Please contact your domain administrator for more

information.

FVE_E_OS_VOLUME_PASSPHRASE_NOT_ALLOWED

0x8031006D

A password cannot be added to the operating system drive.

FVE_E_INVALID_BITLOCKER_OID

0x8031006E

The BitLocker object identifier (OID) on the drive appears to

be invalid or corrupt. Use manage-BDE to reset the OID on

this drive.

FVE_E_VOLUME_TOO_SMALL

0x8031006F

The drive is too small to be protected using BitLocker Drive

Encryption.

FVE_E_DV_NOT_SUPPORTED_ON_FS

0x80310070

The selected discovery drive type is incompatible with the

file system on the drive. BitLocker To Go discovery drives

must be created on FAT formatted drives.

FVE_E_DV_NOT_ALLOWED_BY_GP

0x80310071

The selected discovery drive type is not allowed by the

computer's Group Policy settings. Verify that Group Policy

settings allow the creation of discovery drives for use with

BitLocker To Go.

152 Troubleshooting