Full Disk Encryption Tools

The following table describes the various tools available for Endpoint Encryption.



Context Menu

Access the Full Disk Encryption agent from the Full Disk Encryption icon () in the system tray. From the context menu, you can view the device encryption status and synchronize with PolicyServer.

See Full Disk Encryption Context Menu.


Authenticate with PolicyServer through the Full Disk Encryption preboot. The preboot loads when the endpoint starts before Windows loads. Use the Full Disk Encryption preboot to configure your network and Wi-Fi settings and troubleshoot issues with credentials.

Command Builder

Use Command Builder to generate scripts for automated installations and to create encrypted values for credentials when creating the scripts.

For more information, see the Endpoint Encryption Installation Guide.

Command Line Helper

Use Command Line Helper to create encrypted values to secure credentials when creating an installation script.

See Using the Command Line Helper.


Use DAAutoLogin for Windows patching. DAAutoLogin allows for a one-time bypass of Endpoint Encryption Preboot.

See Patching Process for Full Disk Encryption.

Recovery Console

Use Recovery Console to recover from an operating system critical error, troubleshoot network issues, and manage users or logs.

See Recovery Console.

Recovery Tool

Use the bootable Repair CD to decrypt the hard disk before removing Full Disk Encryption in the event that the disk becomes corrupted. Only use the Repair CD if standard removal methods are not possible. A typical symptom of a corrupted disk is a black screen.

See Recovery Tool.