Consulta de temas

Dell Data Protection External Media Edition\Dell Encryption External Media Whitelisting Guide


Whitelisting for Removable Devices allows you to manage what devices that receive encryption policy.

Affected Products:

Dell Data Protection | External Media Edition
Dell Encryption External Media

Affected OS's:

Windows 7
Windows 8.1
Windows 10
Mac

Note: PNP IDs are case-sensitive when entering in policy. all upper case is required for the policy to properly invoke.
example:
USBSTOR\DISK&VEN_GENERIC&PROD_GENERIC_USB


The PNPDeviceID is how we whitelist removable devices in the Windows Environment. The steps below will show you how to find the PNPDeviceID:

EMS device's PNPDeviceID from the Dell Data Protection | External Media Edition\Dell Encryption External Media log file

To find the PNPDeviceID for removable storage from the Dell Data Protection | External Media Edition\Dell Encryption External Media Log file:

  1. Insert your removable storage device in to the Dell Data Protection encrypted computer.
  2. Open up the EMSService.log found at the locations: C:\Programdata\Dell\Dell Data Protection\Encryption\EMS.
  3. Look for the log entry shows the PNPDeviceID=

For example log entry: 14.03.18 18:50:06.834 [I] [Volume "F:\"] PnPDeviceID =

USBSTOR\DISK&VEN_SEAGATE&PROD_USB&REV_0409\2HC015KJ&0

  • Section 1 / Green - Excludes the Vendor
  • Section 2 / Blue - Excludes all of Seagate’s USB drives
  • Section 3 / Purple - Excludes the specific model being used
  • Section 4 / Orange - Excludes just this device

EMS device's PNPDeviceID in the Microsoft Windows Operating System

To find the PNPDeviceID for removable storage on Windows 7 or later

  1. Insert the removable storage device.
  2. Open the Control Panel and go to Administrative Tools > Computer Management.
  3. Go to Storage > Disk Management.

  1. Right Click on Removable Disk (F: in the image) and select properties.

  1. Select Details Tab and then select Device Instance Path in the Property drop-down menu.

The PNPDeviceID is displayed in the Value field.

Once you have the PNPDeviceID, you can add it to the EME Whitelist group inside of the Removable storage policies on the Dell Data Protection| Personal Edition\Dell Encryption Personal Local Management Console or your Dell Data Protection | Enterprise Edition Server\Dell Security Managment Server Remote Management Console.

Device Whitelist for Dell Data Protection | Enterprise Edition\Dell Security Management Server 9.2 – Current

In the Remote Management Console (RMC) navigate to Populations > Enterprise > Removable Media Encryption. Under Windows Media Encryption select Show Advanced Settings then scroll down to EMS Device Whitelist. Place the PNPID or up to the point you wish into the "EMS Device Whitelist" field.

Device Whitelist for Dell Data Protection | Enterprise Edition 7.x – 9.1.5

You can add the PNPDeviceID information to the EMS whitelist group inside of the Removable storage policies on your Dell Data Protection | Enterprise Edition Server\Dell Security Management Server.

In the console navigate to Enterprise -> Security Policies -> Override (in the upper right for EE, this is not present in VE) -> change the Policy Category drop-down to Windows encryption -> Expand Removable Storage -> place the PNPID or up to the point you wish into the "EMS Device Whitelist" field

The Volume UUID is how we whitelist removable devices in the Mac Environment. The steps below will show you how to find the Volume UUID:

  1. Connect the removable device to the system.
  2. Click the Apple Icon in the top left corner.
  3. Select About This Mac.

  1. Under the Overview tab select System Report.

  1. Under the System Report
    1. Expand Hardware.
    2. Select either USB or Thunderbolt.
    3. Volume UUID will be listed under Volumes.

For additional support, US based customer can call Dell Data Security ProSupport at: 877.459.7304 Ext. 4310039 or you may also contact us via the Chat Portal. For support outside the US, reference ProSupport’s International Contact Numbers list. Visit the Dell Security Community Forum to get insights from other community members and additional resources to help you manage your environment.


Identificación del artículo: SLN294037

Última fecha de modificación: 10/20/2017 10:59 AM

Califique este artículo

Preciso
Útil
Fácil de comprender
¿Este artículo fue útil?
Sí No
Envíenos sus comentarios
Los comentarios no pueden contener estos caracteres especiales: <>"(", ")", "\"
Disculpe, nuestro sistema de comentarios está actualmente inactivo. Vuelva a intentarlo más tarde.

Muchas gracias por sus comentarios.