Install Guide

ManualsBrandsDell ManualsConverged InfrastructureEndpoint Security Suite Enterprise

Table Of Contents

Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.0
Contents
Introduction
- Before You Begin
- Using This Guide
- Contact Dell ProSupport
Requirements
- All Clients
- Encryption
- Full Disk Encryption
- Encryption on Server Operating Systems
- Advanced Threat Prevention
  - Compatibility
- Client Firewall and Web Protection
- SED Manager
- BitLocker Manager
Registry Settings
- Encryption
- Full Disk Encryption
- Advanced Threat Prevention
- SED Manager
- BitLocker Manager
Install Using the Master Installer
- Install Interactively Using the Master Installer
- Install by Command Line Using the Master Installer
Uninstall the Master Installer
- Uninstall the Endpoint Security Suite Enterprise Master Installer
Install Using the Child Installers
- Install Drivers
- Install Encryption
- Install Full Disk Encryption
- Install Encryption on Server Operating System
- Install Advanced Threat Prevention Client
- Install Client Firewall and Web Protection
- Install SED Manager and PBA Advanced Authentication
- Install BitLocker Manager
Uninstall Using the Child Installers
- Uninstall Web Protection and Firewall
- Uninstall Advanced Threat Prevention
- Uninstall Full Disk Encryption
- Uninstall SED Manager
- Uninstall Encryption and Encryption on Server Operating System
- Uninstall BitLocker Manager
Data Security Uninstaller
Commonly Used Scenarios
- Encryption Client and Advanced Threat Prevention
- SED Manager and Encryption External Media
- BitLocker Manager and Encryption External Media
- BitLocker Manager and Advanced Threat Prevention
Provision a Tenant
- Provision a Tenant
Configure Advanced Threat Prevention Agent Auto Update
Pre-Installation Configuration for SED UEFI, and BitLocker Manager
- Initialize the TPM
- Pre-Installation Configuration for UEFI Computers
- Pre-Installation Configuration to Set Up a BitLocker PBA Partition
Designate the Dell Server through Registry
Extract Child Installers
Configure Key Server
- Services Panel - Add Domain Account User
- Key Server Config File - Add User for Security Management Server Communication
- Services Panel - Restart Key Server Service
- Management Console - Add Forensic Administrator
Use the Administrative Download Utility (CMGAd)
- Use Forensic Mode
- Use Admin Mode
Configure Encryption on a Server Operating System
Configure Deferred Activation
- Deferred Activation Customization
- Prepare the Computer for Installation
- Install Encryption with Deferred Activation
- Activate Encryption with Deferred Activation
- Troubleshoot Deferred Activation
Troubleshooting
- All Clients - Troubleshooting
- All Clients - Protection Status
- Dell Encryption Troubleshooting (client and server)
- Advanced Threat Prevention Troubleshooting
- SED Troubleshooting
- Dell ControlVault Drivers
  - Update Dell ControlVault Drivers and Firmware
- UEFI Computers
- TPM and BitLocker
Glossary

DDPE_XXbit_setup.exe /s /v"SERVERHOSTNAME=server.organization.com

POLICYPROXYHOSTNAME=rgk.organization.com MANAGEDDOMAIN=ORGANIZATION

DEVICESERVERURL=https://server.organization.com:8443/xapi/ ENABLE_FDE_LM=1 /

norestart /qn /l*v C:\Dell\DellEncryptionInstall.log"

NOTE: Some older versions may require escape characters of \" around the values of parameters. For example:

DDPE_XXbit_setup.exe /v"CMG_DECRYPT=\"1\" CMGSILENTMODE=\"1\" DA_SERVER=\"server.organization.com\"

DA_PORT=\"8050\" SVCPN=\"administrator@organization.com\" DA_RUNAS=\"domain\username\"

DA_RUNASPWD=\"password\" /qn

Install Full Disk Encryption

● Review Full Disk Encryption Requirements if your organization is using a certificate signed by a root authority, such as

EnTrust or Verisign. A registry setting change is needed on the client computer to enable SSL/TLS trust validation.

● Users log in to the PBA using their Windows credentials.

Command Line Installation

● The following table details the parameters available for the installation.

Parameters

CM_EDITION=1 (remote management)

INSTALLDIR=(change the installation destination)

SERVERHOST=(securityserver.organization.com)

SERVERPORT=8888

SECURITYSERVERHOST=(securityserver.organization.com)

SECURITYSERVERPORT=8443

FEATURE=FDE

ENABLE_FDE_LM=1 (Allows installation of Full Disk Encryption on a computer with active Dell Encryption)

For a list of basic .msi switches and display options that can be used in command lines, refer to Install Using the Child

Installers.

Example Command Line

Encryption Management Agent

● The following example installs remotely managed Full Disk Encryption (silent installation, no reboot, installed in the default

location of C:\Program Files\Dell\Dell Data Protection\Encryption).

EMAgent_64bit_setup.exe /s /v"CM_EDITION=1 FEATURE=FDE SERVERHOST=server.organization.com

SERVERPORT=8888 SECURITYSERVERHOST=server.organization.com SECURITYSERVERPORT=8443 /

norestart /qn"

● Encryption Management Agent

● The following example installs remotely managed Full Disk Encryption and allows installation on a Dell Encryption protected

computer (silent installation, no reboot, installed in the default location of C:\Program Files\Dell\Dell Data

Protection\Encryption).

EMAgent_64bit_setup.exe /s /v"CM_EDITION=1 ENABLE_FDE_LM=1

FEATURE=FDE SERVERHOST=server.organization.com SERVERPORT=8888

SECURITYSERVERHOST=server.organization.com SECURITYSERVERPORT=8443 /norestart /qn"

● Example Command Line to Install Full Disk Encryption and Encryption External Media.

Install Using the Child Installers