Completing Full Disk Encryption Deployment On A Client; Stages Of The Deployment Phase - Check Point HARMONY R81 Administration Manual

n Hybrid Drive or other similar Drive Cache Technologies. See sk107381.
n A compressed root directory. Subdirectories of the root directory can be compressed.
Other Requirements:
n All disks that are encrypted by FDE must have the same format (MBR or GPT)
n GPT-formatted disks are supported only on UEFI devices.
n Update the BIOS on the client computer to the latest version.
n If using the BIOS\UEFI option Fastboot, follow the precautions in sk140215.
n If using a third-party credential provider to log in to Windows, configure FDE to use
(wrap) the third-party provider. See sk118817.

Completing Full Disk Encryption Deployment on a Client

Users will have to reboot their computers twice while Full Disk Encryption deploys. One time to
make sure the Pre-boot is running before Full Disk Encryption encrypts the hard drive, and one
time to validate the authentication credentials.

Stages of the Deployment Phase

You will see the status of the Deployment phase in:
n The Client Endpoint Security Main Page - In the Full Disk Encryption status.
n SmartEndpoint - In the Computer Details > General Details. Look at the Blade Status
for Full Disk Encryption.
n The debug logs
These are the statuses as shown in the Client Endpoint Security Main Page:
n Waiting for Policy - Waiting for policy to be downloaded from server.
n User Acquisition - Users are acquired when they log on to Windows on the computer
that has Full Disk Encryption installed. The number of users that must be acquired
depends on the settings configured. Full Disk Encryption can become active after all
users are acquired. User accounts must have passwords and fulfill password rules to be
acquired.
n Verifying Setup - The client verifies that all of the settings are fulfilled properly and
checks that users acquired are correct and fulfill password policies.
n Deliver Recovery File - The client sends a recovery file to the server. It includes users
on the computer that have permission to use the recovery media.
Installing and Deploying Full Disk Encryption
R81 Harmony Endpoint Server Administration Guide | 218