Maintenance mode


note

This option is not available for EFDE for macOS management.


warning

While Maintenance Mode is enabled on a workstation, the system will boot with no authentication and therefore is not secure from threats.

Maintenance mode offers you an option to enable/ disable, or postpone EFDE FDE authentication requirement.

Administrator can use Pause FDE authentication Client Task to temporary disable the FDE authentication after the computer boots.

You can access Pause FDE authentication client task in your management console by navigating to Tasks -> New -> Client Task and in the Task drop-down menu select Pause FDE authentication:

Settings:

oNumber of reboots - Here you can specify how many reboots are allowed for the workstation to allow user login to the workstation without being prompted to perform FDE authentication.

oSelect the period option: Period of time - you can specify a time period (in seconds, minutes, hours or days) or Date and time during which the workstation can be rebooted without the the requirement to perform FDE authentication.


note

If the task reaches at least one of the specified values in the task, the FDE authentication will be renewed.

To resume the FDE authentication, before the task reaches it's specified limit(s), the administrator can use the Resume FDE authentication Client task.

To permanently disable FDE authentication for a longer period of time, administrator can use the Disable FDE Authentication option in the EFDE policy.

efde_policy_winDisable FDE Authentication setting can be found in the EFDE policy under Encryption options -> Full Disk Ecryption Mode.


warning

Once the FDE authentication is disabled with Disable FDE Authentication setting in the EFDE policy, the FDE authentication will be disabled until this setting is disabled and applied to specific workstation. Resume FDE authentication client task is not able to resume the FDE authentication if the Disable FDE Authentication policy setting is applied.