Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.8

Encryption of server operating systems is intended for use on computers running in server mode, particularly file servers.

• Encryption on server operating systems is compatible only with Encryption Enterprise and Endpoint Security Suite Enterprise.

• Encryption on server operating systems provides:

  • Software encryption
  • Removable media encryption
  • Port controls
    NOTE:

    The server must support port controls.

    Port Control System policies affect removable media on protected servers, for example, by controlling access and usage of the server's USB ports by USB devices. USB port policy applies to external USB ports. Internal USB port functionality is not affected by USB port policy. If USB port policy is disabled, the client USB keyboard and mouse do not function and the user cannot use the computer unless a Remote Desktop Connection is set up before the policy is applied.

• The master installer installs these components if not already installed on the target computer. When using the child installer, you must install these components before installing the clients.

  Prerequisite

  Visual C++ 2012 Update 4 or later Redistributable Package (x86 or x64) Visual C++ 2017 or later Redistributable Package (x86 or x64) As of January 2020, SHA1 signing certificates are no longer valid and cannot be renewed. Devices running Windows Server 2008 R2 must install Microsoft KBs https://support.microsoft.com/help/4474419 and https://support.microsoft.com/help/4490628 to validate SHA256 signing certificates on applications and installation packages. Applications and installation packages signed with SHA1 certificates will function but an error will display on the endpoint during installation or execution of the application without these updates installed

Encryption of server operating systems is for use with:

• File servers with local drives
• Virtual Machine (VM) guests running a server operating system or non-server operating system as a simple file server

• Supported configurations:

  • Servers equipped with RAID 5 or 10 drives; RAID 0 (striping) and RAID 1 (mirroring) are supported independent of each other.
  • Servers equipped with multi TB RAID drives
  • Servers equipped with drives that can be changed out without shutting down the computer

  • Server Encryption is validated against industry-leading antivirus providers.. Hard-coded exclusions are in place for these anti-virus providers to prevent incompatibilities between anti-virus scanning and encryption. If your organization uses an anti-virus provider that is not listed, see KB article 126046 or contact Dell ProSupport for help.

Encryption of server operating systems is not for use with:

• Security Management Servers/Security Management Server Virtuals or servers running databases for Security Management Servers/Security Management Server Virtual.
• Encryption Personal.
• SED Manager, PBA advanced authentication or BitLocker Manager.
• Servers that are part of distributed file systems (DFS).
• Migration to or from Encryption on a server operating system. Upgrade from External Media Edition to Encryption of server operating systems requires that the previous product is uninstalled completely before installing Encryption on server operating systems.
• VM hosts (A VM Host typically contains multiple VM guests.)
• Domain Controllers
• Exchange Servers
• Servers hosting databases (SQL, Sybase, SharePoint, Oracle, MySQL, Exchange, etc.)

• Servers using any of the following technologies:

  • Resilient file systems
  • Fluid file systems
  • Microsoft storage spaces
  • SAN/NAS network storage solutions
  • iSCSI connected devices
  • Deduplication software
  • Hardware deduplication
  • Split RAIDs (multiple volumes across a single RAID)
  • SEDs (RAIDs and NON-RAID)
  • Microsoft Storage Server 2012
• Encryption on a server operating system does not support dual boot configurations since it is possible to encrypt system files of the other operating system, which would interfere with its operation.

• In-place operating system re-installs are not supported. To re-install the operating system, perform a backup of the target computer, wipe the computer, install the operating system, then recover the encrypted data by following recovery procedures. For more information about recovering encrypted data, refer to the Recovery Guide.

Operating Systems

The following table details supported operating systems.

Encryption External Media

• External media must have approximately 55MB available plus open space on the media that is equal to the largest file to be encrypted to host Encryption External Media.
• The following details the supported operating systems when accessing Dell-protected media: