
Enterprise Edition Administrator Guide 67
Encryption Client Installation Tasks
• You can install the Encryption client by itself by extracting the child installer out of the master installer. If you have not
extracted the individual installer yet, follow the procedure in Extract the Child Installers from
the Master Installer. The
Encryption client can be installed using the user interface or by command
line using any push technology available to
your organization.
• On computers equipped with a Hardware Crypto Accelerator
, to use smart cards with Preboot Authentication, the
following registry value must be set on the client computer:
[HKLM\SOFTWARE\DigitalPersona\P
olicies\Default\SmartCards]
"MSSmartcardSupport"=dword:1
0 or no key = Smart Card Support Off, 1 = Smart Card Support On
• Use these instructions to install software encryption or hard
ware encryption for computers equipped with an HCA card.
Best Practices
IT best practices should be followed during deployment. This includes, but is not limited to, controlled test environments
for initial tests and staggered deployments to users.
• Back up any important data.
• To reduce encryption time, run the Windows Disk Cleanup W
izard to remove temporary files and any other unnecessary
data.
• Turn off sleep mode to prevent an unattended computer from going to sleep. Encryption cannot occur on a sleeping
co
mputer.
• In environments where systems are installed with images, it is
strongly recommended
to install the Encryption client
after image installation. If it is necessary to incorporate the Encryption client in an image, it should be done in an
unencrypted state. Should you have questions or concerns, contact Dell Pro Support.
• When upgrading, Dell recommends doing so when no encryption sweep is running. Performing an upgrade during an
encryption
sweep may prevent the client from restarting normally after the installation finishes. If this occurs, a
computer restart corrects the issue.
Install Encryption Client
DDP|E Encryption Client - locate the installer at C:\extracted\Encryption
•Use
DDPE_XXbit_setup.exe
to install or upgrade using a scripted installation, using batch files, or any other push
technology available to your organization.
NOTE: Drivers are needed if installing the encryption client. Additional drivers and software stack are required for supporting Hardware
Crypto Accelerator (HCA). This includes the HCA driver and the Trusted Software Stack (TSS) for TPM.
Commenti su questo manuale