Initiate Full Disk Encryption
Full Disk Encryption encrypts an entire disk, disks, or selected partitions using 256-bit AES encryption.
|
•Pre-Boot authentication is required to access the machine. •Managed users (you) are supervised by administrators. By default, the ESET Endpoint Encryption Server administrator sets Full Disk Encryption to run in a managed administrative mode. The administrator can specify settings for individual machines, including default passwords, and securely delegate the encryption process to the users if required. Reboot for safe start and password dialog boxes can appear. |
Safe Start
Safe Start is a pre-encryption test to ensure your machine boots correctly when encrypted. ESET Endpoint Encryption will install the Full Disk Encryption MBR bootloader and use it to start Windows before any disk encryption occurs. Under normal circumstances, Safe Start initiates, and your PC restarts, displaying the following screen:
Alternatively, on a workstation using a Legacy BIOS, Safe Start can appear as below:
Safe Start ensures the machine is fully supported and enables encryption with ESET Endpoint Encryption Full Disk Encryption. A machine can be incompatible with Full Disk Encryption utilities for several reasons, including different disk controller types, such as RAID, or any third-party drivers that may be installed.
If the machine is incompatible and fails to start, Safe Start attempts to repair the problem and log back in to Windows automatically. If Safe Start cannot automatically repair the problem, system repair can restore the machine because it is not encrypted.
The actual encryption operation only proceeds if Safe Start detects no issues. Safe Start ensures the safety of your machine and its data because Full Disk Encryption only occurs when Safe Start confirms that your machine can start safely with the ESET Endpoint Encryption bootloader.