Endpoint Encryption

Hello,

Im using Symantec encryption server 3.3.2 . i have created few client packages and i have installed in few machines.
I want to know whether we can automatically encrypt the drive with manually clicking on the encrypt button.

Thanks,
Avinash. 

Hi Avinash,

To be able to encrypt the drive via Encrypt button you need to make sure that the policy is as follow:

•  SEMS > Consumers > Consumer Policy > Default > Desktop button > Drive Encryption tab

-  Operation Internal disks / removable disks (if you want as well) are having ticked Allow Encryption.

For your additional information - Select how you want internal and removable disks to be managed.

Allow User Management. Selecting this option means a user can add or remove other passphrase users from the user's device.
Allow Encryption. Selecting this option means users can initiate encryption of internal and/or removable disks. Automatic disk encryption during setup is not affected by this policy.
Allow Decryption. Selecting this option means users can initiate decryption of internal and/or removable disks. If you do not enable this option, users cannot decrypt disks. Decryption after license expiration is not affected by this policy.

-  "Allow" encryption of disks to existing Windows Single Sign On password

-  DO NOT tick "Automatically encrypt Boot disk at installation"

This will allow end user to initiate the encryption process manually via Encrypt button.

HTH

can we encrypt the disk automatically without using the encrypt button ?
do we have any such policies in SEMS?

Hi Avinash,

Yes, you only need to tick the option "Automatically encrypt Boot disk at installation" so once you generate and install msi package on a client after reboot and user enrollment the disk will start encryption automatically.

HTH

Hello Adam,

Thanks, that worked.

Hi Avinash,

Thanks for the feedback.