Dell Data Protection|Encryption
Restart requiredDriver Id : 9NMJ4
Importance : Optional
Version : 8.5.0.987, A11 Latest version Recommended version Latest and Recommended version
Release Date : 23 Jan 2015
Download Type : Applications
Category : Dell Data Security
This package provides Dell Data Protection|Encryption v8.5 and is supported on Latitude, Optiplex, Precision, Tablet and XPS Notebook running the following Windows Operating System: Windows 7, Windows 8 and Windows 8.1.
Download Files
File Format: Application
File Name: MasterInstaller-8.5.0.987.zip
File size: 698.54 MB
To ensure the integrity of your download, please verify the checksum value.
MD5: 628af0cd29f9733963354031a6242963
SHA1: 329c6e97ba0986bbfab658faef9872aebf0f1aff
SHA-256: a160fb700d6bb5cda7f63a84c63bb1276ebe6c11a9acf04b637cdb6d243a5427
Fixes & Enhancements
Fixes:
Not Applicable
Enhancements:
-Preboot Authentication (PBA) with password is now supported on Windows 8 and Windows 8.1 on select Dell UEFI computers with qualified Opal Compliant SEDs.
-Secure Boot is now supported with the Encryption client and Security Tools on select Dell UEFI computers running Windows 8 and Windows 8.1 with qualified Opal Compliant SEDs.
-Intel RAID is now supported with legacy PBA on computers with Hardware Crypto Accelerators (HCAs).
-Manual entry One-time Password (OTP) is now supported for Windows logon and recovery of access to computers running Security Tools.
Enterprise Edition for Windows:
-Previously, FFE was used for Common and User encrypted files, even though HCA encryption was specified. This issue is resolved.
-The user now has proper access to User and Common encrypted files after HCA decryption.
-Previously, in some scenarios, a delay occurred when moving files between folders during Microsoft Word autosaves when using Trend Micro AV and when DDP encryption was installed. This issue is resolved.
-Windows Explorer now updates its icon cache after a successful decrypt/uninstall when running Windows 8.1. The Windows Explorer folders no longer display the DDP Encryption icon after successful decrypt/uninstall.
-Legacy FVE can now optionally be used with an updated BIOS (without requiring an Enterprise HCA installation) on Dell Latitude E5430, E5530, E6230, E6430, and E6530 computers.
-When using Dropbox, if a user is accessing files from a new computer or if a user account name changes, files synchronized with Dropbox no longer appear corrupt and the user no longer receives Access Denied messages when attempting to access the files.
Advanced Authentication:
-Computers now lock upon removal of a smart card from the smart card reader, based on Virtual Edition or Enterprise Server policy setting.
-On Dell Venue tablets, after the Enrollment Wizard is launched, the on-screen keyboard can now be opened by tapping the keyboardicon in the Wizard or the keyboard system tray icon.
-When using HCA, single sign-on is now available when using multi-certificate Common Access Cards (CACs).
Enterprise Edition for SED:
-On computers with Intel Rapid Start, the hibernation partition no longer has to be removed in order for the SED management client/Security Tools to function properly.
Not Applicable
Enhancements:
-Preboot Authentication (PBA) with password is now supported on Windows 8 and Windows 8.1 on select Dell UEFI computers with qualified Opal Compliant SEDs.
-Secure Boot is now supported with the Encryption client and Security Tools on select Dell UEFI computers running Windows 8 and Windows 8.1 with qualified Opal Compliant SEDs.
-Intel RAID is now supported with legacy PBA on computers with Hardware Crypto Accelerators (HCAs).
-Manual entry One-time Password (OTP) is now supported for Windows logon and recovery of access to computers running Security Tools.
Enterprise Edition for Windows:
-Previously, FFE was used for Common and User encrypted files, even though HCA encryption was specified. This issue is resolved.
-The user now has proper access to User and Common encrypted files after HCA decryption.
-Previously, in some scenarios, a delay occurred when moving files between folders during Microsoft Word autosaves when using Trend Micro AV and when DDP encryption was installed. This issue is resolved.
-Windows Explorer now updates its icon cache after a successful decrypt/uninstall when running Windows 8.1. The Windows Explorer folders no longer display the DDP Encryption icon after successful decrypt/uninstall.
-Legacy FVE can now optionally be used with an updated BIOS (without requiring an Enterprise HCA installation) on Dell Latitude E5430, E5530, E6230, E6430, and E6530 computers.
-When using Dropbox, if a user is accessing files from a new computer or if a user account name changes, files synchronized with Dropbox no longer appear corrupt and the user no longer receives Access Denied messages when attempting to access the files.
Advanced Authentication:
-Computers now lock upon removal of a smart card from the smart card reader, based on Virtual Edition or Enterprise Server policy setting.
-On Dell Venue tablets, after the Enrollment Wizard is launched, the on-screen keyboard can now be opened by tapping the keyboardicon in the Wizard or the keyboard system tray icon.
-When using HCA, single sign-on is now available when using multi-certificate Common Access Cards (CACs).
Enterprise Edition for SED:
-On computers with Intel Rapid Start, the hibernation partition no longer has to be removed in order for the SED management client/Security Tools to function properly.
Important Information
Enterprise Edition for Windows:
- After using the Managed Migration Utility, files that were encrypted with PE using the User Roaming key are not accessible. To work around this issue, before migrating, ensure that the User Roaming key is not set for either the Application Data Encryption Key or User Data Encryption Key policy. If the User Roaming key is used, change the key to either Common or User, and save the policy change. Each user on the computer must log on and allow the encryption sweep to complete. After encryption sweeps are complete for all users, run WSScan to ensure that no files are still encrypted with the User Roaming key.
- Pausing encryption is not reflected in the local console if the menu option Process Encryption Only When Screen is Locked is enabled.
- After migrating with the Managed Migration Utility, a second restart is required for computers with Windows 8/Windows 8.1 and Windows Fast Startup feature is enabled. This is due to Windows Fast Startup feature, which logs off and hibernates the user, rather than restarting the computer.
- DDPST and DDPE do not support Sleep-to-Hibernate and single sign-on. Disable Sleep-to-Hibernate when using Preboot Authentication if your organization intends to use single sign-on.
Advanced Authentication:
-After migrating with the Managed Migration Utility, a user may not be able to authenticate with enrolled fingerprints. To work around this issue, change the policy to require only password authentication and then re-enroll fingerprints after logging on.
-Password Manager does not support Google Chrome v35 and later, due to a change in the way Chrome handles extensions.
-Password Manager does not support importing credentials from Internet Explorer 10 and 11.
-On computers running ActivClient 7, SSO may not function properly. Also, multiple smart card icons may display in the Windows credential provider screen.
-When PBA is activated on a computer with more than one user and with only fingerprint authentication enabled, if two or more users enroll with the same fingerprint, the second and subsequent users will fail at authentication for that fingerprint. However, the first user is able to authenticate successfully.
-Eikon external fingerprint readers do not function properly on Windows 8.1 without the latest drivers. To work around this issue, download and install the latest drivers required for your specific reader.
Preboot Authentication:
-When upgrading from pre-v8.2 Enterprise Edition, PBA must be deactivated before beginning the upgrade. After the upgrade, the PBA is activated normally.
-On a UEFI laptop computer with the PBA activated, when the computer is docked, the video will not show up on the external monitor. This is a Dell computer BIOS issue that will be fixed.
-On a computer with multiple users the Windows Power Option, Require a password on wakeup, must be enabled. If this option is not enabled, when the computer resumes from hibernation, it resumes in the user account in which hibernation occurred. This behavior is typical of Windows hibernation.
-After activating PBA on a UEFI computer, if the computer goes into hibernation following the PBA activation, the resume process becomes a cold boot. Subsequent hibernations resume. To work around this issue, restart the computer a second time after PBA activation.
Enterprise Edition for SED:
-During an update to Intel Rapid Storage Technology Drivers, the SED may become undetectable. To resolve this issue, reboot the computer a second time after the update has been applied.
-During installation and the post-installation restart, if an external drive is removed from the computer, the computer will not reboot. To work around this issue, shut down the computer, reconnect the external drive, and power on the computer. The computer will boot normally."
- After using the Managed Migration Utility, files that were encrypted with PE using the User Roaming key are not accessible. To work around this issue, before migrating, ensure that the User Roaming key is not set for either the Application Data Encryption Key or User Data Encryption Key policy. If the User Roaming key is used, change the key to either Common or User, and save the policy change. Each user on the computer must log on and allow the encryption sweep to complete. After encryption sweeps are complete for all users, run WSScan to ensure that no files are still encrypted with the User Roaming key.
- Pausing encryption is not reflected in the local console if the menu option Process Encryption Only When Screen is Locked is enabled.
- After migrating with the Managed Migration Utility, a second restart is required for computers with Windows 8/Windows 8.1 and Windows Fast Startup feature is enabled. This is due to Windows Fast Startup feature, which logs off and hibernates the user, rather than restarting the computer.
- DDPST and DDPE do not support Sleep-to-Hibernate and single sign-on. Disable Sleep-to-Hibernate when using Preboot Authentication if your organization intends to use single sign-on.
Advanced Authentication:
-After migrating with the Managed Migration Utility, a user may not be able to authenticate with enrolled fingerprints. To work around this issue, change the policy to require only password authentication and then re-enroll fingerprints after logging on.
-Password Manager does not support Google Chrome v35 and later, due to a change in the way Chrome handles extensions.
-Password Manager does not support importing credentials from Internet Explorer 10 and 11.
-On computers running ActivClient 7, SSO may not function properly. Also, multiple smart card icons may display in the Windows credential provider screen.
-When PBA is activated on a computer with more than one user and with only fingerprint authentication enabled, if two or more users enroll with the same fingerprint, the second and subsequent users will fail at authentication for that fingerprint. However, the first user is able to authenticate successfully.
-Eikon external fingerprint readers do not function properly on Windows 8.1 without the latest drivers. To work around this issue, download and install the latest drivers required for your specific reader.
Preboot Authentication:
-When upgrading from pre-v8.2 Enterprise Edition, PBA must be deactivated before beginning the upgrade. After the upgrade, the PBA is activated normally.
-On a UEFI laptop computer with the PBA activated, when the computer is docked, the video will not show up on the external monitor. This is a Dell computer BIOS issue that will be fixed.
-On a computer with multiple users the Windows Power Option, Require a password on wakeup, must be enabled. If this option is not enabled, when the computer resumes from hibernation, it resumes in the user account in which hibernation occurred. This behavior is typical of Windows hibernation.
-After activating PBA on a UEFI computer, if the computer goes into hibernation following the PBA activation, the resume process becomes a cold boot. Subsequent hibernations resume. To work around this issue, restart the computer a second time after PBA activation.
Enterprise Edition for SED:
-During an update to Intel Rapid Storage Technology Drivers, the SED may become undetectable. To resolve this issue, reboot the computer a second time after the update has been applied.
-During installation and the post-installation restart, if an external drive is removed from the computer, the computer will not reboot. To work around this issue, shut down the computer, reconnect the external drive, and power on the computer. The computer will boot normally."
Compatible Systems
Supported Operating Systems
Windows 7, 32-bit
Windows 7, 64-bit
Windows 8, 32-bit
Windows 8, 64-bit
Windows 8.1, 32-bit
Windows 8.1, 64-bit
Installation instructions
Completely uninstall any prior versions of DDP|Access or Dell ControlPoint Security Manager software and its drivers (if previously installed on the computer). Back up security credentials prior to uninstalling.
Download
1.Click Download File, to download the file.
2. When the File Download window appears, click Save or Save this program to your hard drive.
Installation
1. Browse to the location where you downloaded the file and double-click the new file.
2. Follow the remaining prompts to perform the update.
Reboot will be required
Download
1.Click Download File, to download the file.
2. When the File Download window appears, click Save or Save this program to your hard drive.
Installation
1. Browse to the location where you downloaded the file and double-click the new file.
2. Follow the remaining prompts to perform the update.
Reboot will be required
Applies to
Dell Data Protection | Encryption