Install Guide
Table Of Contents
- Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.0
- Contents
- Introduction
- Requirements
- Registry Settings
- Install Using the Master Installer
- Uninstall the Master Installer
- Install Using the Child Installers
- Uninstall Using the Child Installers
- Data Security Uninstaller
- Commonly Used Scenarios
- Provision a Tenant
- Configure Advanced Threat Prevention Agent Auto Update
- Pre-Installation Configuration for SED UEFI, and BitLocker Manager
- Designate the Dell Server through Registry
- Extract Child Installers
- Configure Key Server
- Use the Administrative Download Utility (CMGAd)
- Configure Encryption on a Server Operating System
- Configure Deferred Activation
- Troubleshooting
- Glossary
Ports
● To ensure that Client Firewall and Web Protection receives the most current Client Firewall and Web Protection updates,
ports 443 and 80 must be available for the client to communicate with the various destination servers. If the ports are
blocked for any reason, anti-virus signature updates (DAT files) cannot be downloaded, so computers may not have the most
current protection. Ensure that client computers can access the URLs, as follows.
Use Applicatio
n Protocol
Transpo
rt
Protocol
Port
Number
Destination Direction
Reputation
Service
SSL TCP 443 tunnel.web.trustedsource.
org
Outbound
Reputation
Service
Feedback
SSL TCP 443 gtifeedback.trustedsource.
org
Outbound
URL Reputation
Database
Update
HTTP TCP 80 list.smartfilter.com Outbound
URL Reputation
Lookup
SSL TCP 443 tunnel.web.trustedsource.
org
Outbound
Operating Systems
● The following table details supported operating systems.
Windows Operating Systems (32- and 64-bit)
○ Windows 7 SP1: Enterprise, Professional, Ultimate
￭ In January 2020, SHA1 signing certificates are no longer valid and cannot be renewed. Devices running Windows 7
or Windows Server 2008 R2 must install Microsoft KBs https://support.microsoft.com/help/4474419 and https://
support.microsoft.com/help/4490628 to validate SHA256 signing certificates on applications and installation
packages.
Applications and installation packages signed with SHA1 certificates will function but an error will display on the
endpoint during installation or execution of the application without these updates installed
○ Windows 8.1: Enterprise, Pro
○ Windows 10: Education, Enterprise, Pro v1803-v20H2 (April 2018 Update/Redstone 4 - October 2020 Update/20H2)
Note: Windows 10 v2004 (May 2020 Update/20H1) does not support 32-bit architecture. For more information, see
https://docs.microsoft.com/windows-hardware/design/minimum/minimum-hardware-requirements-overview
￭ Windows 10 2016 LTSB
￭ Windows 10 2019 LTSC
SED Manager
● The computer must have a wired network connection to successfully install SED Manager.
● The computer must have a wired network connection for a smart card user to log in through pre-boot authentication for the
first time.
● Third-party credential providers will not function with SED Manager installed and all third-party credential providers will be
disabled when the PBA is enabled.
● IPv6 is not supported.
● SED Manager is not currently supported within virtualized host computers.
● Dell Encryption utilizes Intel's encryption instruction sets, Integrated Performance Primitives (IPP). For more information,
see KB article 126015.
20
Requirements