Check Point HARMONY R81 - Installing and Deploying Full Disk Encryption; Client Requirements for Full Disk Encryption Deployment

Installing and Deploying Full Disk Encryption
R81 Harmony Endpoint Server Administration Guide|217
Installing and Deploying Full Disk Encryption
After a package that includes Full Disk Encryption is successfully installed on a client, many
requirements must be met before the Full Disk Encryption policy can be enforced. Before
these requirements are met, the Pre-boot does not open. The period of time between the
installation and when the policy can be enforced is called the Full Disk Encryption Deployment
Phase.
To move from Deployment phase to Full Disk Encryption policy enforcement, these
requirements must be met:
n
There must be communication between the client and the server.
n
The client must receive Full Disk Encryption and user policies from the server.
n
Users must be acquired according to the configured policy.
n
At least one user account must be configured.
n
The client must send a recovery file to the server.
n
The required System Area must be created and boot records must be updated according
to the configuration (this includes the activation of Pre-boot).
n
The device must have the Client requirements or Full Disk Encryption.
If there is communication between the client and server and the client meets the Client
requirements, all of the requirements are completed automatically. However, if these
requirements are not met, Full Disk Encryption cannot protect the computer and the Pre-boot
cannot open.
Client Requirements for Full Disk Encryption Deployment
Note - Not all the Full Disk Encryption (FDE) requirements are shown here. For the
complete FDE requirements, see the Release Notes for your Endpoint Security client
version .
Clients must have:
n
32MB of continuous free space on the client's system volume
Note - During deployment of the Full Disk Encryption component on the client,
the Full Disk Encryption service automatically defragments the volume to create
the 32MB of continuous free space, and suspends the Windows hibernation
feature while the disk is encrypted.
Clients must not have:
n
RAID.
n
Partitions that are part of stripe or volume sets.