Whitelisting for Removable Devices allows you to manage what devices that receive encryption policy.
Dell Encryption External Media
Dell Data Protection | External Media Edition
Note: PNP IDs are case-sensitive when entering in policy. all upper case is required for the policy to properly invoke.
The PNPDeviceID is how we whitelist removable devices in the Windows Environment. The steps below will show you how to find the PNPDeviceID:
EMS device's PNPDeviceID from the Dell Encryption External Media (formerly Dell Data Protection | External Media Edition) log file
To find the PNPDeviceID for removable storage from the Dell Encryption External Media Log file:
- Insert your removable storage device in to the Dell Data Protection encrypted computer.
- Open up the EMSService.log found at the locations: C:\Programdata\Dell\Dell Data Protection\Encryption\EMS.
- Look for the log entry shows the PNPDeviceID=
For example log entry: 14.03.18 18:50:06.834 [I] [Volume "F:\"] PnPDeviceID =
- Section 1 / Green - Excludes the Vendor
- Section 2 / Blue - Excludes all of Seagate’s USB drives
- Section 3 / Purple - Excludes the specific model being used
- Section 4 / Orange - Excludes just this device
EMS device's PNPDeviceID in the Microsoft Windows Operating System
To find the PNPDeviceID for removable storage on Windows 7 or later
- Insert the removable storage device.
- Open the Control Panel and go to Administrative Tools > Computer Management.
- Go to Storage > Disk Management.
- Right Click on Removable Disk (F: in the image) and select properties.
- Select Details Tab and then select Device Instance Path in the Property drop-down menu.
The PNPDeviceID is displayed in the Value field.
Once you have the PNPDeviceID, you can add it to the EME Whitelist group inside of the Removable storage policies on the Dell Encryption Personal (formerly Dell Data Protection | Personal Edition) Local Management Console or your Dell Data Protection | Enterprise Edition Server\Dell Security Managment Server Remote Management Console.
In the Remote Management Console (RMC) navigate to Populations > Enterprise > Removable Media Encryption. Under Windows Media Encryption select Show Advanced Settings then scroll down to EMS Device Whitelist. Place the PNPID or up to the point you wish into the "EMS Device Whitelist" field.
You can add the PNPDeviceID information to the EMS whitelist group inside of the Removable storage policies on your Dell Security Management Server (formerly Dell Data Protection | Enterprise Edition Server).
In the console navigate to Enterprise -> Security Policies -> Override (in the upper right for Dell Security Management Server, this is not present in Dell Security Management Server Virtual (formerly Dell Data Protection | Virtual Edition) -> change the Policy Category drop-down to Windows encryption -> Expand Removable Storage -> place the PNPID or up to the point you wish into the "EMS Device Whitelist" field
The Volume UUID is how we whitelist removable devices in the Mac Environment. The steps below will show you how to find the Volume UUID:
- Connect the removable device to the system.
- Click the Apple Icon in the top left corner.
- Select About This Mac.
- Under the Overview tab select System Report.
- Under the System Report
- Expand Hardware.
- Select either USB or Thunderbolt.
- Volume UUID will be listed under Volumes.
For support, US-based customers may contact Dell Data Security ProSupport at 877.459.7304, Option 1, Ext. 4310039, or via the Chat Portal. To contact support outside the US, reference ProSupport’s International Contact Numbers. For additional insights and resources, visit the Dell Security Community Forum.