Reference Guide

Security Management Server - AdminHelp v9.8
83
Lock a Self-Encrypting Drive
To lock the PBA screen and prevent any user from logging onto the computer, follow these steps:
1. In the left pane, click Populations > Endpoints.
2. Select the Workstation Endpoint Type.
3. If you know the full Hostname of the endpoint, enter it in the Search field. However, you may leave
the field blank to display all Workstation endpoints.
4. Click the search icon.
An endpoint or list of endpoints displays, based on your search filter.
5. Click the Hostname of the endpoint with the self-encrypting drive to lock.
6. Click the Details & Actions tab.
7. Under SED Device Control, click Lock.
8. Click Yes to confirm that you want to send the Lock command to the endpoint.
Send Wipe Command to Self-Encrypting Drive
WARNING: The Wipe command clears all data from the disk and cannot be undone.
The Wipe command functions as a “restore to factory state” for the SED drive. The Wipe command can be
used to re-purpose a computer or, in an emergency situation, wipe the computer, making the data
permanently unrecoverable. When the wipe command is consumed by the client, all history and details
about this endpoint are removed from the Security Management Server orSecurity Management Server
Virtual. Ensure that this is the desired behavior before invoking this command.
To send the Wipe command, follow these steps:
1. In the left pane, click Populations > Endpoints.
2. Select the Workstation Endpoint Type.
3. If you know the full Hostname of the endpoint, enter it in the Search field. However, you may leave
the field blank to display all Workstation endpoints.
4. Click the search icon.
An endpoint or list of endpoints displays, based on your search filter.
5. Click the Hostname of the endpoint on which to wipe the self-encrypting drive.
6. Click the Details & Actions tab.
7. Under SED Device Control, click Wipe.
8. Click Yes to confirm that you want to send the Wipe command to the endpoint.
Set the Server Connection Retry Interval
To set the interval at which the SED client will attempt to contact the Security Management Server when the
Server is unavailable to communicate with the SED client, set the following value on the client computer:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DellMgmtAgent\Parameters
CommErrorSleepSecs (DWORD Value)=300