BitLocker Encryption for Windows Clients

BitLocker lets you encrypt the hard drives on a Windows computer, and is an integral part of Windows. Check Point BitLocker uses the Endpoint Security Management Server A Security Management Server that manages your Endpoint Security environment. Includes the Endpoint Security policy management and databases. It communicates with endpoint clients to update their components, policies, and protection data., Client Agent and the SmartEndpoint A Check Point GUI application which connects to the Endpoint Security Management Server, to manage your Endpoint Security environment - to deploy, monitor and configure Endpoint Security clients and policies. UI to manage BitLocker. BitLocker Management is implemented as a Windows service component called Check Point BitLocker Management. It runs on the client together with the Client Agent (the Device Agent). Check Point BitLocker Management uses APIs provided by Microsoft Windows to control and manage BitLocker.

You can:

• Configure the BitLocker encryption policy.

• Switch the encryption engine for selected clients from Check Point Full Disk Encryption A component on Endpoint Security Windows clients. This component combines Pre-boot protection, boot authentication, and strong encryption to make sure that only authorized users are given access to information stored on desktops and laptops. Acronym: FDE. to BitLocker Management, or from BitLocker Management to Full Disk Encryption.

• Take control of unmanaged computers so that they are centrally managed, either by Check Point BitLocker Management or by Check Point Full Disk Encryption.

• Recover data from a computer that is encrypted with BitLocker.

Configure the settings for BitLocker in SmartEndpoint in the Policy tab > Full Disk Encryption rules.