Administrator Guide

Use Application
Protocol
Transport
Protocol
Port Number Destination Direction Notes
Reputation
Service Feedback
SSL TCP 443 gtifeedback.trustedsource.or
g
Outbound
Quarantine
Manager
HTTP
HTTPS
TCP 80
443
Your Security Management
Server/Security
Management Server Virtual
Bi-directional
URL Reputation
Database Update
HTTP TCP 80 list.smartlter.com Outbound
URL Reputation
Lookup
SSL TCP 443 tunnel.web.trustedsource.org Outbound
SED Client
The computer must have a wired network connection to successfully install SED management.
IPv6 is not supported.
Be prepared to shut down and restart the computer after you apply policies and are ready to begin enforcing them.
Computers equipped with self-encrypting drives cannot be used with HCA cards. Incompatibilities exist that prevent the provisioning of
the HCA. Dell does not sell computers with self-encrypting drives that support the HCA module. This unsupported conguration would
be an after-market conguration.
If the computer targeted for encryption is equipped with a self-encrypting drive, ensure that the Active Directory option, User Must
Change Password at Next Logon, is disabled. Preboot Authentication does not support this Active Directory option.
Dell recommends that you do not change the authentication method after the PBA has been activated. If you must switch to a dierent
authentication method, you must either:
Remove all the users from the PBA.
or
Deactivate the PBA, change the authentication method, and then re-activate the PBA.
IMPORTANT
:
Due to the nature of RAID and SEDs, SED management does not support RAID. The issue with RAID=On with SEDs is that
RAID requires access to the disk to read and write RAID-related data at a high sector not available on a locked SED from start
and cannot wait to read this data until after the user is logged on. Change the SATA operation in the BIOS from RAID=On to
AHCI to resolve the issue. If the operating system does not have the AHCI controller drivers pre-installed, the operating system
will blue screen when switched from RAID=On to AHCI.
Conguration of self-encrypting drives for Dell’s SED management dier between NVMe and non-NVMe (SATA) drives, as follows.
Any NVMe drive that is being leveraged as an SED – The BIOS’ SATA operation must be set to RAID ON, as Dell’s SED
management does not support AHCI on NVMe drives.
Any NVMe drive that is being leveraged as an SED – The BIOS's boot mode must be UEFI and Legacy option ROMs must be
disabled.
Any non-NVMe drive that is being leveraged as an SED – The BIOS’ SATA operation must be set to AHCI, as Dell’s SED
management does not support RAID with non-NVMe drives.
RAID ON is not supported because access to read and write RAID-related data (at a sector that is not available on a locked non-
NVMe drive) is not accessible at start-up, and cannot wait to read this data until after the user is logged on.
The operating system will crash when switched from RAID ON > AHCI if the AHCI controller drivers are not pre-installed. For
instructions on how to switch from RAID > AHCI (or vice versa), see http://www.dell.com/support/article/us/en/19/
SLN306460.
Supported OPAL compliant SEDs require updated Intel Rapid Storage Technology Drivers, located at http://www.dell.com/support/
home/us/en/19/product-support/product/dell-dp-endpt-security-suite/drivers. Dell recommends Intel Rapid Storage Technology
Driver version 15.2.0.0 or later, with NVMe drives.
Dell Data Security Endpoint Security Suite Pro
Requirements
11