Procedure

1. Verify that all of the agent installation prerequisites have been completed.
   See Agent Installation Prerequisites.
2. Verify that the hard disk is not already encrypted, no other full disk encryption product is installed, and that Microsoft BitLocker is disabled.
3. Run a hard drive integrity utility on the system drive.
   For example, to run the Windows utility Check Disk, open a command prompt and run chkdsk /f /r. Windows will perform Check Disk on the next restart.
   If bad sectors are found, fix or replace the hard drive depending on your enterprise hardware policy.
4. Defragment the system drive.
5. Copy the installation files to the system drive.
6. Run TMFDEInstall.exe.

   Note If the User Account Control windows displays, click Yes to allow the installer to make changes to the Endpoint Encryption device.

   The Full Disk Encryption installer checks the endpoint for installation issues. If a system incompatibility is discovered, the installer closes and generates the PreInstallCheckReport.txt in the same location as the installer. For more information, see Pre-Installation Check.
7. Specify the following PolicyServer information:

   Option	Description
   Server name	Specify the PolicyServer IP address, host name, or FQDN and include the port number assigned to that configuration.
   Enterprise	Specify the Enterprise. Only one Enterprise is supported.
   User name	Specify the user name of an account with permission to add devices to the Enterprise.
   Password	Specify the password for the user name.
   Forcesoftware	(Optional) Forces Full Disk Encryption to use software encryption instead of hardware encryption. This option is recommended for SED disks.

   WARNING Full Disk Encryption is unable to install on SED disks attached to devices using UEFI if these disks were previously managed by Windows Bitlocker. To install Full Disk Encryption on these disks, perform one of the following: Configure Full Disk Encryption to use software-based encryption by adding the FORCESOFTWARE parameter during installation. Restore the SED disk back to its factory setting. This procedure removes all existing data from the SED disk. After the disk has been restored, try running the installer again.

8. At the Installation Complete screen, click Close.
   A message appears asking if you want to restart or shut down the endpoint. The endpoint restarts for software-based encryption or shuts down for hardware-based encryption.
9. Click Yes to restart or shutdown the endpoint.
   Full Disk Encryption installation is complete when the Full Disk Encryption preboot displays. At the preboot screen, the user must log on. The user is required to change their password after logging on. The next time Windows starts, Full Disk Encryption encrypts the disk.

   Policies are synchronized with PolicyServer after the endpoint restarts.