Dell Data Protection Encryption endpoint with SED showing as "Not Protected" in Remote Management Console

摘要: If a machine has the Dell Data Protection | Encryption client that is installed with a Self-Encrypting Drive and has System Data Encryption (SDE) policy that is enabled, the endpoint's "EndPoint Protection Status" is read as "Not Protected," in Dell Enterprise Server's Remote Management Console. ...

本文适用于 本文不适用于 本文并非针对某种特定的产品。 本文并非包含所有产品版本。
查看其他资源

症状

Affected Products:

  • Dell Data Protection | Self-Encrypting Drive

原因

This is because the Dell Data Protection | Encryption client is designed to disable SDE if it detects a SED drive. When the Dell Data Protection | Enterprise Server has SDE set as a policy for this machine, the device sweep timestamp is not updated, and the server does not set the Protected flag.

解决方案

In the Remote Management Console, all other status fields for this endpoint have the correct information, but the SDE start and end sweep time fields are blank.

You can search for CanApplySDE on any device with the Dell Data Protection | Encryption software client to determine if an SED or FVE policy is in play and being applied.

When the Shield can apply SDE policy properly, you see this line:

CanApplySDE? - Yes (SED present = 0, FVE Provisioned = 0, FVE Decrypting = 0, Always Apply= 0, FVE Disks=0)
Note: For information about activating SDE policy if SED is detected, reference How to Enable SDE Encryption for Dell Encryption Enterprise or Dell Encryption Personal on Systems With Self-Encrypting Drives.

To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.

受影响的产品

Dell Encryption
文章属性
文章编号: 000129499
文章类型: Solution
上次修改时间: 11 4月 2024
版本:  8
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。