Dell Endpoint Security Suite Enterprise Advanced Installation Guide v3.8

If a self-signed certificate is used on the Dell Server for BitLocker Manager, SSL/TLS trust validation must remain disabled on the client computer (SSL/TLS trust validation is disabled by default with BitLocker Manager). Before enabling SSL/TLS trust validation on the client computer, the following requirements must be met.

• A certificate signed by a root authority, such as EnTrust or Verisign, must be imported into Dell Server.
• The full chain of trust of the certificate must be stored in the Microsoft keystore on the client computer.

• To enable SSL/TLS trust validation for BitLocker Manager, change the value of the following registry entry to 0 on the client computer.

  [HKLM\System\CurrentControlSet\Services\DellMgmtAgent\Parameters]

  "DisableSSLCertTrust"=DWORD:0

  0 = Enabled

  1 = Disabled

• To prevent Bitlocker Manager from detecting removable disks as fixed disks, add the following registry key:

  HKLM\Software\Dell\Dell Data Protection\

  "UseEncryptableVolumeType" = DWORD:1

  0=Disabled (default)

  1=Enabled