Users Guide

Pre-boot Authentication v10.3
● When enabling the Pre-Boot Authentication environment for Dell Encryption, the boot order no longer reverts to PXE boot
when it is enabled in BIOS. [DDPC-4334, DDPC-8377, DDPC-8378, DDPC-10961, DDPSUS-2176, DDPSUS-2456]
● An issue resulting in the Pre-boot Authentication environment failing to properly recognize some keys on non-English
keyboards is resolved. [DDPC-8154, DDPC-10713, DDPSUS-1656, DDPSUS-2415]
NOTE: This fix requires the BIOS update launched in late April 2019 or in May 2019. The BIOS revision and release date will
vary based on the platform affected. If the BIOS update is applied before Dell Encryption v10.3 is installed on devices with
US English keyboards, the Pre-boot Authentication environment may not properly translate all characters.
● An issue resulting in an incorrect prompt when a new user attempts authentication with a smart card without connection to
the Dell Server is resolved. [DDPC-9351]
● An issue that resulted in the Challenge Response screen displaying in place of the password authentication screen after
exceeding recovery questions attempts on a Legacy computer with PBA active is resolved. [DDPC-9426]
● An issue resulting in sleep mode failing on an Optiplex 7060 when Dell Encryption and SED management are both activated
after an upgrade to Windows 10 October 2018 update is resolved. [DDPC-10410]
● Valid certificates work as expected when a smart card is used. [DDPC-10512]
● An issue resulting in a malformed Pre-boot Authentication database due to incorrect updates to the Pre-boot Authentication
environment's datastore is resolved. Primary and secondary datastores now properly validate data and rotate. [DDPC-10757,
DDPSUS-2482]
● A delay during login when selecting the option to run as a different user in Windows with Pre-boot Authentication enabled is
resolved. [DDPC-10956] [DDPSUS-2531]
SED Management v10.3
● Dell Encryption now allows registry-based overrides to prevent disabling third-party credential providers after the Pre-boot
Authentication environment is enabled. To prevent Dell Encryption from disabling third-party credential providers, create the
following registry key:
HKLM\SOFTWARE\Dell\Dell Data Protection\
"AllowOtherCredProviders" = DWORD:1
0=Disabled (default)
1=Enabled
NOTE: This value may prevent the Dell credential provider from properly syncing credentials initially due to third-party
credential providers being disabled. Ensure the devices using this registry key can properly communicate with the Dell
Server. [DDPC-10542, DDPSUS-2410, DDPSUS-2412, DDPSUS-2506]
Full Disk Encryption v10.3
● Full Disk Encryption is now supported on Optiplex 7460 All-in-one and Optiplex 7760 All-in-one when SATA is set to AHCI.
[DDPC-9224]
● Dell Encryption now allows registry-based overrides to prevent disabling third-party credential providers after the Pre-boot
Authentication environment is enabled. To prevent Dell Encryption from disabling third-party credential providers, create the
following registry key:
HKLM\SOFTWARE\Dell\Dell Data Protection\
"AllowOtherCredProviders" = DWORD:1
0=Disabled (default)
1=Enabled
NOTE: This value may prevent the Dell credential provider from properly syncing credentials initially due to third-party
credential providers being disabled. Ensure the devices using this registry key can properly communicate with the Dell
Server. [DDPC-10542, DDPSUS-2410, DDPSUS-2412, DDPSUS-2506]
● An issue resulting in a malformed Pre-boot Authentication database due to incorrect updates to the Pre-boot Authentication
environment's datastore is resolved. Primary and secondary datastores now properly validate data and rotate. [DDPC-10757,
DDPSUS-2482]
Technical Advisories
23