Procedure

1. Go to Start → Trend Micro SecureCloud Agent → SecureCloud Encryption Wizard.
   This opens the SecureCloud Encryption Wizard screen.

   
2. On the Encrytion tab, choose which devices to provision:

   Option	Description
   All unencrypted devices	Use this to select all unencrypted devices, including the boot device.
   All unencrypted data devices	Use this to select all unencrypted devices except for the boot device.
   Only boot device	Use this to select only boot device if it is unencrypted.
   Choose devices	Use this to specify which unencrypted devices from a group to encrypt.

3. Select the devices for encryption.
4. Configure the following as necessary:

   Option	Description
   Existing Data	Preserve: Use this option to retain all data while encrypting. This is also known as in-place encryption. Erase: Use this option to delete all data while encrypting. This is also known as format-erasing encryption.
   File System	While Existing Data is set to Erase, use these options to determine which file system to format the volume into. On a Windows operating system, the options are NTFS and FAT32.
   Mount Point	While Existing Data is set to Erase, type in the mount point to set the device to.

5. Supply the provisioning pass phrase.
6. Click Encrypt.
   The SecureCloud Agent uses the encryption key provided by the Key Management Server to encrypt the devices attached to this machine.