To enable the Full Disk Encryption module for Endpoint Protection, this must be enabled within the policy applied to the endpoints you wish to encrypt. To kick-start the process, simply chat with us or raise a ticket including the host/computer names you'd like to encrypt.
Our team will then make the necessary policy changes for you. Once complete, any endpoints with the Full Disk Encryption module enabled, will present the following pop-up to the end user.
The user must then choose a PIN which meets the requirements outlined in the screenshot below.
Important – the user will need to enter this pin each time the host is booted or restarted.
Once a pin has been selected, the encryption process will run in the background. Once this is completed, Full Disk Encryption is fully set up! 🎉
What if a user forgets their PIN or I want to decrypt an endpoint?
In either case, reach out to Defense.com by chat or ticket and provide the hostname of the endpoint you wish to decrypt.
Our team will apply an updated policy with decrypt enabled which will trigger the decryption of the drive.