Install Guide
Table Of Contents
- Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.0
- Contents
- Introduction
- Requirements
- Registry Settings
- Install Using the Master Installer
- Uninstall the Master Installer
- Install Using the Child Installers
- Uninstall Using the Child Installers
- Data Security Uninstaller
- Commonly Used Scenarios
- Provision a Tenant
- Configure Advanced Threat Prevention Agent Auto Update
- Pre-Installation Configuration for SED UEFI, and BitLocker Manager
- Designate the Dell Server through Registry
- Extract Child Installers
- Configure Key Server
- Use the Administrative Download Utility (CMGAd)
- Configure Encryption on a Server Operating System
- Configure Deferred Activation
- Troubleshooting
- Glossary
[HKLM\SOFTWARE\DigitalPersona\Policies\Default\SmartCards]
"MSSmartcardSupport"=DWORD:1
Set the Authentication Method policy to Smart Card in the Management Console, and commit the change.
● To suppress all Toaster notifications from the Encryption Management Agent, the following registry value must be set on the
client computer.
[HKEY_LOCAL_MACHINE\SOFTWARE\Dell\Dell Data Protection]
"PbaToastersAllowClose" =DWORD:1
0=Enabled (default)
1=Disabled
BitLocker Manager
● If a self-signed certificate is used on the Dell Server for BitLocker Manager, SSL/TLS trust validation must remain disabled
on the client computer (SSL/TLS trust validation is disabled by default with BitLocker Manager). Before enabling SSL/TLS
trust validation on the client computer, the following requirements must be met.
○ A certificate signed by a root authority, such as EnTrust or Verisign, must be imported into Dell Server.
○ The full chain of trust of the certificate must be stored in the Microsoft keystore on the client computer.
○ To enable SSL/TLS trust validation for BitLocker Manager, change the value of the following registry entry to 0 on the
client computer.
[HKLM\System\CurrentControlSet\Services\DellMgmtAgent\Parameters]
"DisableSSLCertTrust"=DWORD:0
0 = Enabled
1 = Disabled
○ To prevent Bitlocker Manager from detecting removable disks as fixed disks, add the following registry key:
HKLM\Software\Dell\Dell Data Protection\
"UseEncryptableVolumeType" = DWORD:1
0=Disabled (default)
1=Enabled
34
Registry Settings