Install Guide

Windows Operating Systems Supported to Access Encrypted Media (32- and 64-bit)
￭ Windows 10 2016 LTSB
￭ Windows 10 2019 LTSC
Mac Operating Systems Supported to Access Encrypted Media (64-bit kernels)
○ macOS High Sierra 10.13.5 - 10.13.6
○ macOS Mojave 10.14.0 - 10.14.4
○ macOS Catalina 10.15.5 - 10.15.6
Full Disk Encryption
● Full Disk Encryption requires activation against a Dell Server running v9.8.2 or later.
● Full Disk Encryption is not currently supported within virtualized host computers.
● Full Disk Encryption requires a discrete hardware TPM. PTT and firmware-based TPMs are not supported at this time.
● Third-party credential providers will not function with FDE features installed and all third-party credential providers will be
disabled when the PBA is enabled.
● The client computer must have network connectivity or access code to activate.
● The computer must have a wired network connection for a smartcard user to log in through pre-boot authentication for the
first time.
● Operating system Feature updates are not supported with Full Disk Encryption.
● A wired connection is required for the PBA to communicate with the Dell Server.
● An SED cannot be present on the target computer.
● Full Disk Encryption utilizes Intel's encryption instruction sets, Integrated Performance Primitives (IPP). For more
information, see KB article 126015.
● Full Disk Encryption is not supported with BitLocker or BitLocker Manager. Do not install Full Disk Encryption on a computer
on which BitLocker or BitLocker Manager is installed.
● Dell recommends Intel Rapid Storage Technology Driver v15.2.0.0 or later, with NVMe drives.
● Any NVMe drive that is being leveraged for PBA:
○ If the Dell device was manufactured in 2018 or later: Either RAID ON or AHCI may be leveraged with NVMe drives.
○ If the Dell device was manufactured in 2017 or earlier: The BIOS's SATA operation must be set to RAID ON, as Dell's PBA
manager does not support AHCI on NVMe drives.
○ The BIOS boot mode must be set to Unified Extensible Firmware Interface (UEFI). Legacy operation ROMs must be
disabled.
● Any non-NVMe drive that is being leveraged for PBA:
○ BIOS SATA operation must be set to AHCI.
○ RAID ON is not supported because access to read and write RAID-related data (at a sector that is not available on a
locked non-NVMe drive) is not accessible at start-up, and cannot wait to read this data until after the user is logged on.
○ The operating system will crash when switched from RAID ON > AHCI if the AHCI controller drivers are not pre-installed.
For instructions on how to switch from RAID > AHCI (or vice versa), see KB article 124714.
● Full Disk Encryption management does not support dual boot configurations since it is possible to encrypt system files of the
other operating system, which would interfere with its operation.
● In-place operating system re-install is not supported. To re-install the operating system, perform a backup of the target
computer, wipe the computer, install the operating system, then recover the encrypted data following established recovery
procedures.
● Direct Feature Updates from Windows 10 v1607 (Anniversary Update/Redstone 1), to the Windows 10 v1903 (May 2019
Update/19H1) are not supported with FDE. Dell recommends updating the operating system to a newer Feature Update if
updating to Windows 10 v1903. Any attempts to update directly from Windows 10 v1607 to v1903 results in an error message
and the update is prevented.
● The master installer installs these components if not already installed on the target computer. When using the child
installer, you must install these components before installing the clients.
Requirements
11