User Authorization before Encryption

Full Disk Encryption policy settings enable user acquisition by default. If user acquisition is disabled, the administrator must assign at least one Pre-boot user account to each client computer before encryption can start. You can require one or more users to be acquired before encryption can start. You can also configure clients to continue user acquisition after Pre-boot is already enabled. This might be useful if a client computer is used by many users, also called roaming profiles.

Usually a computer has one user and only one user must be acquired. If the computer has multiple users, it is best if they all log on to the computer for Full Disk Encryption to collect their information and acquire them.

User acquisition settings

• Enable automatic user acquisition

• Amount of users to acquire before Pre-boot is enabled - Select the number of users to acquire before the Endpoint Security enforces Pre-boot on acquired users.

• Enable Pre-boot if at least one user has been acquired after X days - Select the number of days to wait before Pre-boot is enforced on acquired users. This setting limits the number of days when user acquisition is active for the client. If the limit expires and one user is acquired, Pre-boot is enforced and encryption can start. If no users are acquired, user acquisition continues. Pre-boot is enforced on acquired users after one of the criteria are met.

To configure the advanced settings for user acquisition, go to Advanced Settings > User Acquisition:

• Continue to acquire users after Pre-boot has been enforced - Pre-boot is active for users who were acquired and user acquisition continues for those who were not acquired.

• User acquisition will stop after having acquired additional X users - User acquisition continues until the selected number of additional users are acquired.