Endpoint Encryption

What is the procedure for modifying SEE configuration, including group key and/or master certificate, after client deployment?

 For computers that are in Active Directory any policy changes post-install must be done via Active Directory GPO.

For computers that do not live in Active Directory the SEE Native Policy Editor is used.

Both are available in the SEE Manager.

 so the changes are made in see manager and then pushed through a GPO?

where in SEE manager do I make these changes, and is the process make a changes export the install push it and reinstall SEE or is there way to just do updates to configuration changes?

in see manager console - you have an option for GPMC. From there you have apply policies. If you edit a GPO -- if you go to computer config >> software settings >> see >> see framework >> there u'll see the options for making change

 Vaibhav Tiwari  has it correct.

For most setting changes you only need to configure a GPO.

Some settings require a new MSI package and overinstalling with the vomus switch