Install Guide

ManualsBrandsDell ManualsConverged InfrastructureEndpoint Security Suite Enterprise

Table Of Contents

Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.0
Contents
Introduction
- Before You Begin
- Using This Guide
- Contact Dell ProSupport
Requirements
- All Clients
- Encryption
- Full Disk Encryption
- Encryption on Server Operating Systems
- Advanced Threat Prevention
  - Compatibility
- Client Firewall and Web Protection
- SED Manager
- BitLocker Manager
Registry Settings
- Encryption
- Full Disk Encryption
- Advanced Threat Prevention
- SED Manager
- BitLocker Manager
Install Using the Master Installer
- Install Interactively Using the Master Installer
- Install by Command Line Using the Master Installer
Uninstall the Master Installer
- Uninstall the Endpoint Security Suite Enterprise Master Installer
Install Using the Child Installers
- Install Drivers
- Install Encryption
- Install Full Disk Encryption
- Install Encryption on Server Operating System
- Install Advanced Threat Prevention Client
- Install Client Firewall and Web Protection
- Install SED Manager and PBA Advanced Authentication
- Install BitLocker Manager
Uninstall Using the Child Installers
- Uninstall Web Protection and Firewall
- Uninstall Advanced Threat Prevention
- Uninstall Full Disk Encryption
- Uninstall SED Manager
- Uninstall Encryption and Encryption on Server Operating System
- Uninstall BitLocker Manager
Data Security Uninstaller
Commonly Used Scenarios
- Encryption Client and Advanced Threat Prevention
- SED Manager and Encryption External Media
- BitLocker Manager and Encryption External Media
- BitLocker Manager and Advanced Threat Prevention
Provision a Tenant
- Provision a Tenant
Configure Advanced Threat Prevention Agent Auto Update
Pre-Installation Configuration for SED UEFI, and BitLocker Manager
- Initialize the TPM
- Pre-Installation Configuration for UEFI Computers
- Pre-Installation Configuration to Set Up a BitLocker PBA Partition
Designate the Dell Server through Registry
Extract Child Installers
Configure Key Server
- Services Panel - Add Domain Account User
- Key Server Config File - Add User for Security Management Server Communication
- Services Panel - Restart Key Server Service
- Management Console - Add Forensic Administrator
Use the Administrative Download Utility (CMGAd)
- Use Forensic Mode
- Use Admin Mode
Configure Encryption on a Server Operating System
Configure Deferred Activation
- Deferred Activation Customization
- Prepare the Computer for Installation
- Install Encryption with Deferred Activation
- Activate Encryption with Deferred Activation
- Troubleshoot Deferred Activation
Troubleshooting
- All Clients - Troubleshooting
- All Clients - Protection Status
- Dell Encryption Troubleshooting (client and server)
- Advanced Threat Prevention Troubleshooting
- SED Troubleshooting
- Dell ControlVault Drivers
  - Update Dell ControlVault Drivers and Firmware
- UEFI Computers
- TPM and BitLocker
Glossary

○ From Your Dell FTP Account - Locate the installation bundle at Endpoint-Security-Suite-Ent-2.x.x.xxx.zip and then

Extract the Child Installers from the Master Installer. After extraction, locate the file at C:\extracted\Encryption

Management Agent.

Command Line Installation

● The following table details the parameters available for the installation.

Parameters

CM_EDITION=1 <remote management>

INSTALLDIR=<change the installation destination>

SERVERHOST=<securityserver.organization.com>

SERVERPORT=8888

SECURITYSERVERHOST=<securityserver.organization.com>

SECURITYSERVERPORT=8443

ARPSYSTEMCOMPONENT=1 <no entry in the Control Panel Programs list>

For a list of basic .msi switches and display options that can be used in command lines, refer to Install Using the Child

Installers.

The following example commands install or upgrade the Encryption Management Agent.

Example Command Line

\Encryption Management Agent

● The following example installs remotely managed SED Manager, the Encryption Management Agent, and the local security

console (silent installation, no reboot, no entry in the Control Panel Programs list, installed in the default location of C:

\Program Files\Dell\Dell Data Protection\Encryption).

EMAgent_XXbit_setup.exe /s /v"CM_EDITION=1 SERVERHOST=server.organization.com

SERVERPORT=8888 SECURITYSERVERHOST=server.organization.com SECURITYSERVERPORT=8443

ARPSYSTEMCOMPONENT=1 /norestart /qn"

Install BitLocker Manager

●

NOTE:

If your organization requires the use of third-party credential providers, the Encryption Management Agent must

be installed or upgraded with the FEATURE=BLM or FEATURE=BASIC parameter.

● Review BitLocker Manager Client Requirements if your organization is using a certificate signed by a root authority, such as

EnTrust or Verisign. A registry setting change is needed on the client computer to enable SSL/TLS trust validation.

● The BitLocker Manager client installers can be located at:

○ From Your Dell FTP Account - Locate the installation bundle at Endpoint-Security-Suite-Ent-2.x.x.xxx.zip and then

Extract the Child Installers from the Master Installer. After extraction, locate the file at C:\extracted\Encryption

Management Agent.

Command Line Installation

● The following table details the parameters available for the installation.

Install Using the Child Installers