Product guide

1
Install the EEGO extension (EEGO.ZIP) in McAfee ePO. Repeat the same procedures used for
installing the product extension.
2
Check in the EEGO software package (EegoPackage.ZIP) to McAfee ePO. Repeat the same
procedures used for checking in the product package.
3
Deploy Endpoint Encryption GO to the client system. Repeat the same procedures used for the
product deployment task.
4
Enforce EEGO policies to the client system.
After restarting, the client system communicates with the McAfee ePO server and pulls down the
assigned Endpoint Encryption GO policy, runs the tests and reports the system diagnostic information
according to the defined policies.
If you select the Only activate if health check (Endpoint Encryption : Go) passes option and then uninstall EEGO from
the client, it is not possible to deselect this option. As a result of this, EEPC will fail to activate.
Also, the status of EEGO endpoints can be monitored through various chart representations available
in McAfee ePO.
EEGO runs these tests for installing EEPC:
• Incompatible product detection: SafeBoot, HP ProtectTools 2009, Bitlocker, PointSec, Truecrypt,
GuardianEdge, Symantec Endpoint Encryption, SafeGuardEasy and PGP Whole Disk Encryption.
• Smart Controller predictive failure, a test that reports if the Operating System is reporting that the
S.M.A.R.T. controller is indicating an imminent failure.
• Disk Status, a test for BIOS based systems, reports if the disk (MBR and partition structure) is
suitable to install EEPC.
Make sure to note that EEGO is not supported for UEFI systems.
• Datachannel communication status, a test reporting of the success or failure of the Datachannel
communication from the client to the McAfee ePO server.
• Datachannel communication delay, a test in milliseconds of the delay of the communication
between the McAfee ePO server and the endpoint.
If any of these requirements is not valid, and the EEPC system policy is configured to abandon
activation if the EEGO tests fail, EEPC activation will be abandoned.
EEGO is capable of detecting a series of circumstances that might impact the rollout of EEPC. However,
EEGO does not replace the need to perform due diligence testing prior to a rollout.
Pre‑boot Smart Check
The Pre‑Boot Smart Check is functionality in EEPC that performs various tests to ensure that the EEPC
pre‑boot environment can work successfully on a device. It will test the areas that have been identified
to cause incompatibility issues in the past.
If a device fails the Pre‑Boot Smart Check it will not activate EEPC and will not proceed. You can view
the audit log to get the latest information on any progress of the check from the last time the device
synchronized with McAfee ePO.
The Pre‑Boot Smart Check can be used in conjunction with EEGO and help administrators during initial
deployments. EEGO will perform checks and validation in the operating system, and the Pre‑Boot
Smart Check will perform checks/validations outside of the operating system. The combined usage can
give administrators the highest confidence of a successful deployment.
2
Design overview
Requirements testing for client systems
14
McAfee Endpoint Encryption 7.0 Patch 1 Software Best Practices Guide