Users Guide

● Full Disk Encryption is not supported with BitLocker or BitLocker Manager. Do not install Full Disk Encryption on a computer
on which BitLocker or BitLocker Manager is installed. [DDPC-7311]
● Full Disk Encryption requires a 180 Mb partition at the end of the drive to write the Preboot Authentication environment
to the local disk. The sectors used for this partition are stored within the registry for tracking within the host operating
system and the Preboot Authentication environment. If the 180 Mb partition is removed, the registry key location is:
HKLM\software\Dell\Dell Data Protection\PBA.
This key and it's sub-key can be safely deleted if the Preboot Authentication environment is not in place. [DDPC-7453]
● Full Disk Encryption is not supported with the Encryption client in this release. Do not install Full Disk Encryption on a
computer on which the Encryption client is installed.
● Full Disk Encryption is only supported with English operating systems.
BitLocker Manager v8.16
● No Technical Advisories exist.
New Features and Functionality v1.5
● Added 03/2018-Dell has introduced a change to how built-in encryption exclusions are being handled. Previously, built-in
exclusions would prevent the encryption of any file that was created, or copied into a folder that was defined within
these exclusion lists. Future hard-coded exclusions introduced in 8.15 and later will be protected in a way that only system
generated files will no longer be encrypted, all user generated data will still be encrypted that enters these folders through a
file create or a file copy action. As always, file move operations will retain the encryption status of the source folder until an
encryption sweep or a change to the file is enacted.
● A new policy in Security Management Server/Security Management Server Virtual v9.8 allows administrators to block more
than 100 specific categories of information on the Internet, when the optional Web Protection feature is installed.
● A new policy in Security Management Server/Security Management Server Virtual v9.8 allows the administrator to enable or
disable users' ability to select Remember Me on the PBA login screen and customize Support dialog text.
● The Encryption client drivers pass the Hypervisor Code Integrity (HVCI) checks.
● Operating system downgrade is now supported with the Encryption client.
● SSL is no longer supported with Advanced Authentication, SED Management, or BitLocker Manager. TLS 1.0, 1.1, or 1.2
should be used rather than SSL.
● The Security Tools Mobile application has reached End of Life. For more information, see www.dell.com/support/
article/us/en/19/sln305349.
● Windows 10 Creators Update is not yet supported with the optional Web Protection and Firewall features. For this reason,
installation of these features is prevented on Windows 10 Creators Update.
Resolved Technical Advisories v1.5
All Clients
● The user name now displays in the Authentication Required dialog during credential enrollment in the Dell Data Security
Console. [DDPC-6013]
Advanced Threat Prevention v1.5
● Decryption performance is improved on a computer running Advanced Threat Prevention after policy is set to decrypt.
[DDPC-5365]
● File cleanup during uninstallation is improved. [DDPC-5594]
● Added 05/2018 - Web Protection and Firewall are now selected by default in the installer during migration from Enterprise
Edition to Endpoint Security Suite Enterprise. [DDPC-5888]
Resolved Customer Issues
● A second license is no longer consumed when the optional Web Protection and Firewall features are installed. [DDPC-6407]
46
Technical Advisories