How to Allow Third-Party Credential Provider when Dell Encryption Pre-Boot Authentication Environment is Enabled

Affected Products:

• Dell Encryption
• Dell Encryption Self-Encrypting Drive Manager
• Dell Encryption Full Disk Encryption

Affected Versions:

• v10.3.0 and Later

Dell has added the ability to prevent the removal of third-party credential providers, or to disable the Dell Credential Provider to allow for interoperability with additional Credential Providers while logging into Windows.

Before installing the Dell Encryption agent, setting the registry keys below either prevent Dell Encryption from disabling third-party credential providers, prevent the Dell credential provider from being enabled, or both.

To allow third-party credential providers, add the registry key:

HKLM\SOFTWARE\Dell\Dell Data Protection\
DWORD: AllowOtherCredProviders
Value: 1

To prevent the Dell credential provider from being added, add the registry key:

HKLM\SOFTWARE\Dell\Dell Data Protection\
DWORD: DisableCredProviders
Value: 1

This value prevents the Dell’s credential provider from consuming credentials. This prevents credentials from syncing down to the PBA, requiring authentication to the Dell Security Management Server.

To both prevent the Dell credential provider from being enabled, and to allow third-party credential providers, add both registry keys:

HKLM\SOFTWARE\Dell\Dell Data Protection\
DWORD: AllowOtherCredProviders
Value: 1

HKLM\SOFTWARE\Dell\Dell Data Protection\
DWORD: DisableCredProviders
Value: 1

To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.

Related Articles:

• Dell Encryption Personal Technical Advisories v11.7.1