Initiate Full Disk Encryption
ESET Endpoint Encryption Full Disk Encryption enables encrypting an entire disk, disks, or selected partitions using 256-bit AES encryption. Pre-Boot authentication is required to gain access to the machine.
Managed users (you) are under administrative control. By default, the ESET Endpoint Encryption Server administrator sets Full Disk Encryption to run in a managed administrative mode. The administrator can specify settings for individual machines, including default passwords, and securely delegate the encryption process to the users if required. |
Safe Start
Safe Start is a pre-encryption test to ensure your machine successfully starts when encrypted. ESET Endpoint Encryption will install the Full Disk Encryption MBR bootloader and use it to start Windows before any disk encryption occurs. Under normal circumstances, Safe Start initiates, and your PC will restart, displaying the following screen:
Alternatively, on a workstation using a Legacy BIOS, Safe Start may appear as below:
Safe Start ensures the machine is fully supported and enables encryption with ESET Endpoint Encryption Full Disk Encryption. A machine may be incompatible with Full Disk Encryption utilities for several reasons, including different disk controller types, such as RAID, or any third-party drivers that may be installed.
If the machine is incompatible and fails to start, Safe Start will attempt to repair the problem and log back in to Windows automatically. If Safe Start cannot automatically repair the problem, system repair can restore the machine because it is not encrypted.
The actual encryption operation will only proceed if Safe Start detects no issues. Safe Start guarantees the safety of your machine and any data on it because Full Disk Encryption only occurs when Safe Start has determined that your machine can start safely with the ESET Endpoint Encryption bootloader.