1. /
  2. Products & Solutions/
  3. Products/
  4. Encryption Family/
  5. Drive Encryption

Symantec Drive Encryption

Whole disk encryption software

Symantec Drive Encryption provides organizations with comprehensive, high performance full disk encryption for all data (user files, swap files, system files, hidden files, etc.) on desktops, laptops, and removable media. This full disk encryption software protects data from unauthorized access, providing strong security for intellectual property, customer, and partner data. Protected systems can be centrally managed by Symantec Encryption Management Server simplifying deployment, policy creation, distribution, and reporting.

Supported Operating Systems


  • Microsoft Windows 8, 8.1 Enterprise (32- and 64-bit versions)
  • Microsoft Windows 8, 8.1 Pro (32- and 64-bit editions)
  • Microsoft Windows 7 (all 32- and 64-bit editions, including Service Pack 1)
  • Microsoft Windows Vista (all 32- and 64-bit editions, including Service Pack 2)
  • Microsoft Windows XP Home Edition (Service Pack 2 or 3)
  • Microsoft Windows XP Professional 64-bit (Service Pack 2)
  • Microsoft Windows XP Professional 32-bit (Service Pack 2 or 3)
Note: The above operating systems are supported only when all of the latest hot fixes and security patches from Microsoft have been applied.

Windows Server

  • Windows Server 2012 R2 64-bit Edition with internal RAID 1 and RAID 5
  • Windows Server 2012 64-bit Edition with internal RAID 1 and RAID 5
  • Microsoft Windows Server 2008 Service Pack 1 and 2 (64-bit edition) with internal system RAID 1 and RAID 5
  • Microsoft Windows Server 2008 R2 (64-bit edition) with internal system RAID 1 and RAID 5

Mac OS X

  • Apple Mac OS X 10.8.4, 10.8.5, 10.9.0 - 10.9.2


  • Ubuntu 10.04 LTS, 12.04, 12.04.1, 12.04.2, 12.04.3 (32- and 64-bit versions)
  • Red Hat Linux 5.7-6.4 (32- and 64-bit versions)
Note: Symantec Drive Encryption for Linux is command line only.

Supported Keyboard Languages

Symantec Drive Encryption for Windows

  • English (United States, United Kingdom,US-International)
  • Belgian (Belgium; Comma), Belgian (Belgium; Period)
  • Bosnian (Bosnia),Bosnian (Bosnia; Cyrillic)
  • Bulgarian (Bulgaria), Bulgarian (Bulgaria; Latin) , Bulgarian (Bulgaria; Typewriter)
  • Canadian Multilingual Standard (Canada)
  • Chinese Simplified (China, Singapore), Chinese Traditional (Hong Kong, Taiwan)
  • Croatian (Croatia)
  • Czech (Czech Republic; QWERTY)
  • Danish (Denmark)
  • Dutch (The Netherlands)
  • Estonian (Estonia)
  • Finnish (Finland)
  • French (Belgium), French (Canada) , French (France) , French (Switzerland)
  • German (Germany/Austria) , German (IBM) , German (Switzerland)
  • Hebrew (Israel)
  • Hungarian (Hungary) , Hungarian (Hungary; 101 keys)
  • Icelandic (Iceland)
  • Irish (Ireland)
  • Italian (Italy), Italian (Italy; 142 keys)
  • Japanese (Japan)
  • Korean (Korea)
  • Norwegian (Norway)
  • Polish (Poland; Programmers), Polish (Poland; 214 keyboard)
  • Portuguese (Brazil; ABNT keyboards), Portuguese (Brazil; ABNT2 keyboards)
  • Portuguese (Portugal)
  • Romanian (Romania)
  • Russian (Russia; Cyrillic)
  • Serbian (Serbia and Montenegro; Cyrillic), Serbian (Serbia and Montenegro; Latin)
  • Slovak (Slovakia)
  • Slovenian (Slovenia)
  • Spanish (Spain), Spanish (Latin America) , Spanish Variation
  • Swedish (Sweden)
  • Turkish (Turkey; F), Turkish (Turkey; Q)
  • Ukrainian (Ukraine)

Symantec Drive Encryption for Mac OS X

  • English (US-International)
  • Japanese (Japan)
  • German (Germany); German (Switzerland)
  • French (France); French (Switzerland)
  • Spanish (Latin America), Spanish (Spain; ISO)

Supported Disks

  • Desktop or laptop disks (partitions in the case of Windows, or the entire disk for Windows and Mac OS X)
  • External disks, excluding music devices and digital cameras
  • USB flash disks
  • Solid-state drives

Unsupported Disks


  • Dynamic disks
  • SCSI drives/controllers
  • Software RAID disks
  • Diskettes and CD-RW/DVD-RWs

Mac OS X

  • Disks formatted using the APM partition scheme
  • Any type of server hardware, including RAID disk drives and software RAID drives
  • Diskettes and CD-RW/DVD-RWs
  • exFAT formatted disks
  • Any configuration where the system partition is not on the same disk as boot partition

Authentication Options

  • OpenPGP RFC 4880 keys
  • X.509 keys

Symmetric Key Algorithms

  • AES 256-bit keys
  • AES 128-bit keys (enabled on Symantec Encryption Management Server)

Centralized Management Requirements

Symantec Drive Encryption is centrally managed by Symantec™ Encryption Management Server, Powered by PGP Technology, which requires a dedicated hardware server. For supported hardware and other information, please refer to the Symantec Encryption Management Server technical specifications.

Two-Factor Authentication (Windows Only)

Generic Smart Card Readers

Most CCID smart card readers are compatible. The following readers have been tested by Symantec Corporation:
  • OMNIKEY CardMan 3121 USB for desktop systems (076b:3021)
  • OMNIKEY CardMan 6121 USB for mobile systems (076b:6622)
  • ActiveIdentity USB 2.0 reader (09c3:0008)
  • SCM Microsystem Smart Card Reader model SCR3311
  • CyberJack smart card readers - Reiner SCT CyberJack pinpad (0c4b:0100).
  • ASE smart card readers - Athena ASEDrive IIIe USB reader (0dc3:0802)
  • Embedded smart card readers - Dell D430, D630, and D830
  • Embedded smart card readers - Dell E6410 and E6510 (Broadcom)

Compatible Smart Cards or Tokens for Symantec/Drive Encryption Authentication (Windows Only)

Symantec Drive Encryption is compatible with the following smart cards for pre-boot authentication:
  • ActiveIdentity ActivClientCAC cards, 2005 model
  • Aladdin eToken PRO 64K, 2048 bit RSA capable
  • Aladdin eToken PRO USB Key 32K, 2048 bit RSA capable
  • Aladdin eToken PRO without 2048 bit capability (older smart cards)
  • Aladdin eToken PRO Java 72K
  • Aladdin eToken NG-OTP 32K - Note: Other Aladdin eTokens, such as tokens with flash, should work provided they are APDU compatible with the compatible tokens. OEM versions of Aladdin eTokens, such as those issued by VeriSign, should work provided they are APDU compatible with the compatible tokens.
  • Athena ASEKey Crypto USB Token
  • Athena ASECard Crypto Smart Card - Note: The Athena tokens are compatible only for credential storage.
  • Axalto Cyberflex Access 32K V2
  • Charismathics CryptoIdentity plug 'n' crypt Smart Card only stick
  • EMC RSA SecurID SID800 Token (v1 and 2) - Note: This token is compatible only for key storage. SecurID is not compatible.
  • EMC RSA Smart Card 5200
  • Marx CrypToken USB token
  • Rainbow iKey 3000
  • S-Trust StarCOS smart card - Note: S-Trust SECCOS cards are not compatible.
  • SafeNet iKey 2032 USB token
  • SafeNet 330 smart card
  • T-Systems Telesec NetKey 3.0 smart card
  • T-Systems TCOS 3.0 IEI smart card
  • Personal Identity Verification (PIV) cards: - Oberthur ID-One Cosmo V5.2D PIV cards using ActivClient version 6.1 client software. - Giesecke and Devrient Sm@rtCafe Expert 3.2 PIV cards using ActivClient version 6.1 client software.
Symantec Drive Encryption for Windows also recognizes and works with smart cards from other vendors if the vendor includes a standards-based PKCS-11 library in its software drivers.


  • 1-877-294-5255