What's New

Option to update PolicyServer setting in agents after installation

For endpoints that have Encryption Management for Microsoft Bitlocker and Encryption Management for Apple FileVault installed, Endpoint Encryption adds the option to update the PolicyServer settings in agents, even after installation.

AES Encryption key size used by Microsoft Bitlocker

For easier deployment, Endpoint Encryption adds the option to configure the Microsoft Bitlocker AES Encryption key size based on the Full Disk Encryption policy setting.

Full Disk Encryption enhancements

Endpoint Encryption adds the following enhancements:

• Support for Intel and Toshiba self-encrypting drives

• Remote retrieval of the encryption status of each disk from the device by directly querying the agent via system management software

• To streamline the Window update process, disks already encrypted by Full Disk Encryption can be configured to repeatedly skip the Full Disk Encryption Preboot

File Encryption support for new authentication types

For File Encryption, Endpoint Encryption adds support for the following authentication types:

• User Principal Name (UPN) and domain password

• Single Sign On by UPN format

Logon user information

Endpoint Encryption updates the PolicyServer MMC and Control Manager widgets to show logon user information for Endpoint Encryption agents.

Support for UEFI firmware

Endpoint Encryption now supports booting on endpoints with UEFI firmware.

Improved drive performance using AES-XTS encryption mode

For new installations, Endpoint Encryption uses the AES-XTS method by default. However, existing agents upgraded to this version will retain the existing AES-CBC encryption mode. Moreover, Endpoint Encryption can manage endpoints where both AES-XTS and AES-CBC encryption modes are used.

Support for systems with more than one physical drive

Endpoint Encryption encrypts all fixed drives during installation. Additionally, users have the option of manually encrypting any fixed drives attached after installation.

Wi-Fi preboot policies

Wi-Fi settings can be further customized via new policies available in PolicyServer. These policy settings allow or restrict access to the Wi-Fi settings during preboot.

Preboot screen customization

PolicyServer now supports customization of the preboot screen.

Encryption of used disk space for Full Disk Encryption

Full Disk Encryption will only encrypt the used disk space, resulting in a faster encryption process.

Safety check

Endpoint Encryption runs a safety check after installation to verify if the installation was successfully completed. If successful, Endpoint Encryption loads the preboot screen and starts encrypting. However, if the installation was unsuccessful, (or a force shut down is detected), Endpoint Encryption will not load the preboot screen.

Multiple Active Directory Domain Synchronization to PolicyServer

Endpoint Encryption supports synchronization of multiple Active Directory domains to PolicyServer

Installation enhancements for Encryption Management for Microsoft Bitlocker

Encryption Management for Microsoft BitLocker successfully installs even if Microsoft BitLocker is installed and enabled. In previous versions, the installer stops if MicrosoftBitLocker is installed and enabled.

Support for multiple languages

Supported languages for Full Disk Encyrption, File Encryption, Encryption Management for Microsoft BitLocker, Encryption Management for Apple File Vault:

• de (German)

• en (English)

• fr (French)

• es (Spanish)

• pl (Polish)

• it (Italian)

• cs (Czech)

Supported languages for PolicyServer:

• de (German)

• en (English)

• fr (French)

• es (Spanish)

Supported languages for the OfficeScan Plug-in Service (PLS) Add-on:

• de (German)

• en (English)

• fr (French)

• es (Spanish)

• pl (Polish, but will display English)

• it (Italian, but will display English)