Install Guide
Table Of Contents
- Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.1
- Contents
- Introduction
- Requirements
- Registry Settings
- Install Using the Master Installer
- Uninstall the Master Installer
- Install Using the Child Installers
- Uninstall Using the Child Installers
- Data Security Uninstaller
- Commonly Used Scenarios
- Provision a Tenant
- Configure Advanced Threat Prevention Agent Auto Update
- Pre-Installation Configuration for SED UEFI, and BitLocker Manager
- Designate the Dell Server through Registry
- Extract Child Installers
- Configure Key Server
- Use the Administrative Download Utility (CMGAd)
- Configure Encryption on a Server Operating System
- Configure Deferred Activation
- Troubleshooting
- Glossary
The Dell Server issues an encryption key for the Machine ID, creates the virtual server user account, creates an
encryption key for the user account, bundles the encryption keys, and creates the relationship between the encryption
bundle and the virtual server user account.
3. Click Close.
After activation, encryption begins.
4. After the encryption sweep has finished, restart the computer to process any files that were previously in use. This is an
important step for security purposes.
NOTE:
If the Secure Windows Credentials policy is enabled, Encryption of server operating systems
encrypts the \Windows\system32\config files, which includes Windows credentials. The files in
\Windows\system32\config are encrypted even if the SDE Encryption Enabled policy is disabled. By default, the
Secure Windows Credentials policy is selected.
NOTE:
After restarting the computer, authentication to the Common encryption key always requires the protected server's
Machine key. The Dell Server returns an unlock key to access the encryption keys and policies in the vault (The keys and
policies are for the server, not for the user). Without the server's Machine key, the Common encryption key cannot be
unlocked, and the computer cannot receive policy updates.
Confirm Activation
From the local console, open the About dialog to confirm that Encryption of server operating systems is installed,
authenticated, and in Server mode. If the Encryption Client ID is red, encryption has not yet been activated.
Install Using the Child Installers
55