ESET Online Help

Select the category
Select the topic

Initiate Full Disk Encryption

ESET Endpoint Encryption Full Disk Encryption enables encrypting an entire disk, disks, or selected partitions using 256-bit AES encryption. Pre-Boot authentication is required to gain access to the machine.


Managed users (you) are under administrative control. By default, the  ESET Endpoint Encryption Server administrator sets Full Disk Encryption to run in a managed administrative mode. The administrator can specify settings for individual machines, including default passwords, and securely delegate the encryption process to the users if required.

arrow_down_businessInitiation on macOS
arrow_down_businessInitiation on Windows

Safe Start

Safe Start is a pre-encryption test to ensure your machine successfully starts when encrypted. ESET Endpoint Encryption will install the Full Disk Encryption MBR bootloader and use it to start Windows before any disk encryption occurs. Under normal circumstances, Safe Start initiates, and your PC will restart, displaying the following screen:


Alternatively, on a workstation using a Legacy BIOS, Safe Start may appear as below:


Safe Start ensures the machine is fully supported and enables encryption with ESET Endpoint Encryption Full Disk Encryption. A machine may be incompatible with Full Disk Encryption utilities for several reasons, including different disk controller types, such as RAID, or any third-party drivers that may be installed.

If the machine is incompatible and fails to start, Safe Start will attempt to repair the problem and log back in to Windows automatically. If Safe Start cannot automatically repair the problem, system repair can restore the machine because it is not  encrypted.

The actual encryption operation will only proceed if Safe Start detects no issues. Safe Start guarantees the safety of your machine and any data on it because Full Disk Encryption only occurs when Safe Start has determined that your machine can start safely with the ESET Endpoint Encryption bootloader.