Client Requirements for Full Disk Encryption Deployment

See the Release Notes for complete Full Disk Encryption requirements.

Clients must have:

• 32MB of continuous free space on the client's system volume

Note - During deployment of the Full Disk Encryption blade on the client, the Full Disk Encryption service automatically defragments the volume to create the 32MB of continuous free space, and suspends the Windows hibernation feature while the disk is encrypted.

Clients must not have:

• RAID
• Partitions that are part of stripe or volume sets
• The root directory cannot be compressed. Subdirectories of the root directory can be compressed.

Completing Full Disk Encryption Deployment on a Client

Users will have to reboot their computers twice while Full Disk Encryption deploys. One time to make sure the Pre-boot is running before Full Disk Encryption encrypts the hard drive, and one time to validate the authentication credentials.

Stages of the Deployment Phase

You will see the status of the Deployment phase in:

• The Client Endpoint Security Main Page - In the Full Disk Encryption status.
• SmartEndpoint - In the Computer Details > General Details. Look at the Blade Status for Full Disk Encryption.
• The debug logs

These are the statuses as shown in the Client Endpoint Security Main Page:

• Waiting for Policy – Waiting for policy to be downloaded from server.
• User Acquisition – Users are acquired when they log on to Windows on the computer that has Full Disk Encryption installed. The number of users that must be acquired depends on the settings configured. Full Disk Encryption can become active after all users are acquired.
• Verifying Setup – The client verifies that all of the settings are fulfilled properly and checks that users acquired are correct and fulfill password policies.
• Deliver Recovery File- The client sends a recovery file to the server. It includes users on the computer that have permission to use the recovery media.
• Waiting for Restart– The user must reboot the client. After it is rebooted, users will see the Pre-boot. Users get a message to log in with their Windows credentials. Then Full Disk Encryption starts to encrypt the volumes according to the policy.
• Encryption in Progress – Full Disk Encryption is encrypting the volumes.