This protection layer allows you to provide full disk encryption on endpoints, by managing BitLocker on Windows, and FileVault and diskutil on macOS.
You can encrypt and decrypt boot and non-boot volumes, and Defense.com handles the entire process, with minimum intervention from users. Additionally, Defense.com stores the recovery keys needed to unlock volumes if users forget their passwords.
Compatibility
From the software perspective, the requirements are almost the same as for BitLocker, FileVault and the diskutil command-line utility and most of the limitations refer to these tools.
Windows
The Full Disk Encryption in Defense.com supports BitLocker, starting with version 1.2, on machines with and without a Trusted Platform Module (TPM) chip.
The Defense.com agent supports BitLocker on the endpoints with the following operating systems:
Windows 11 Pro
Windows 11 Pro for Workstations
Windows 11 Enterprise
Windows 11 Education
Windows 10 Education
Windows 10 Enterprise
Windows 10 Pro
Windows 8.1 Enterprise
Windows 8.1 Pro
Windows 8 Enterprise
Windows 8 Pro
Windows 7 Ultimate (with TPM)
Windows 7 Enterprise (with TPM)
Windows Server 2022*
Windows Server 2019*
Windows Server 2016*
Windows Server 2012 R2*
Windows Server 2012*
Windows Server 2008 R2* (with TPM)
*BitLocker is not included on these operating systems and must be installed separately. For more information about deploying BitLocker on Windows Server, refer to these KB articles provided by Microsoft:
Note: Defense.com only supports encryption on Windows 7 and Windows 2008 R2 with TPM.
MacOS
The Full Disk Encryption in Defense.com module is compatible with FileVault and diskutil on macOS endpoints running the following operating systems:
macOS Ventura (13.x)
macOS Monterey (12.x)
macOS Big Sur (11.x)
macOS Catalina (10.15)
macOS Mojave (10.14)
For more information about how to configure and deploy Full Disk Encryption, please contact your Defense.com representative.