Installation and full-disk encryption
22Administration manual 4603.7988.02 ─ 03
Note: A restart is required. Please note that shutting down the workstation might
only put it to hybrid shutdown, i.e. the workstation is not really restarted at its next
startup. To make sure that the workstation is restarted properly, do one of the fol-
lowing:
● Confirm the prompt to restart your workstation after the installation.
● Manually restart the workstation.
● Disable hybrid shutdown in your Windows settings.
You have installed R&S Trusted Disk.
During the installation, the R&S Trusted Disk installer imports a code signing certificate
to the Trusted Publishers certificate store on the workstation. The certificate is needed
to validate the signed PowerShell script contained in the R&S Trusted Disk installer.
4.4 Initializing the full-disk encryption
R&S Trusted Disk's full-disk encryption secures user data, the operating system and
any temporary data on a workstation. Only the admin and users with permission can
access an encrypted workstation using a smart card and PIN for pre-boot authentica-
tion.
Contents
● Full-disk encryption wizard......................................................................................22
● Activating setup mode (UEFI/GPT).........................................................................23
4.4.1 Full-disk encryption wizard
After installing R&S Trusted Disk and restarting the workstation, the R&S Trusted Disk
full-disk encryption wizard is launched.
On Legacy BIOS/MBR-based workstations, the "Compress this drive to save disk
space" option in the properties of the Windows partition needs to be disabled.
1. Connect a smart card personalized for the user.
2. To follow the full-disk encryption wizard, click "Next".
3. Select the partitions that you want to encrypt.
Note: After the encryption, unencrypted partitions on internal hard disk drives are
hidden and cannot be accessed anymore.
4. To finish the wizard, click "Next".
5.
NOTICE! Setup mode required for UEFI/GPT. After initializing the full-disk encryp-
tion on an UEFI-based workstation, you need to activate setup mode, so
R&S Trusted Disk can perform a system takeover. For instructions on how to acti-
Initializing the full-disk encryption
To Next Page
Loading...