Users Guide

Table Of Contents
New Features and Functionality v8.15
Added 03/2018-Dell has introduced a change to how built-in encryption exclusions are being handled. Previously, built-in
exclusions would prevent the encryption of any file that was created, or copied into a folder that was defined within
these exclusion lists. Future hard-coded exclusions introduced in 8.15 and later will be protected in a way that only system
generated files will no longer be encrypted, all user generated data will still be encrypted that enters these folders through a
file create or a file copy action. As always, file move operations will retain the encryption status of the source folder until an
encryption sweep or a change to the file is enacted.
A new policy in Security Management Server/Security Management Server Virtual v9.8 allows the administrator to enable or
disable users' ability to select Remember Me on the PBA login screen and customize Support dialog text.
The Encryption client drivers pass the Hypervisor Code Integrity (HVCI) checks.
Operating system downgrade is now supported with the Encryption client.
SSL is no longer supported with Advanced Authentication, SED Management, or BitLocker Manager. TLS 1.0, 1.1, or 1.2
should be used rather than SSL.
Enterprise Edition is rebranded to Encryption Enterprise.
The Security Tools Mobile application has reached End of Life. For more information, see www.dell.com/support/
article/us/en/19/sln305349.
Resolved Technical Advisories v8.15
All Clients
The user name now displays in the Authentication Required dialog during credential enrollment in the Dell Data Security
Console. [DDPC-6013]
Encryption Enterprise for Windows
Performance of Encryption client upgrade that begins during an encryption sweep is improved. [DDPC-4261]
The Encryption client now displays the EMS Device Whitelist policy rather than an error when the policy setting exceeds
2048 characters. [DDPC-4382]
The Local Management Console Preferences setting, Indicate encryption status using Windows Shell Extension icon
overlays, is removed. Previously, the setting was present, but icon overlay behavior is controlled by Dell Server policy rather
than the local setting. [DDPC-5227]
An issue is resolved that caused the Encryption Removal Agent to occasionally become unresponsive during decryption.
[DDPC-5583]
Encrypted files can now be accessed after operating system downgrade. [DDPC-5676]
The Encrypt for Sharing dialog no longer continues to display after the user locks the Dell Latitude 5289. [DDPC-5719]
Communication between a client server running Encryption and the Dell Server is hardened.
Resolved Customer Issues
An issue is resolved that resulted in unresponsiveness of the computer following hibernation. [DDPC-1475]
An issue is resolved that caused the computer to become unresponsive, followed by a Windows bugcheck. [DDPC-2349,
DDPC-3284]
Two issues are resolved that led to errors in applications that were running during an encryption sweep. [DDPC-2751,
DDPC-4444]
After upgrade to Windows 10, a second restart is no longer required in certain cases for encryption to resume. [DDPC-4080]
Added 05/2018 - When the Encryption client is installed on Windows Server 2016 Standard Edition, the OS/Version field for
the Endpoint now reads "Microsoft Windows Server 2016 Datacenter/10.0.14393" in the Dell Server. [DDPC-4836]
The computer now restarts after Port Control policies are enabled or updated. [DDPC-5255]
Diagnostic Info performance and error messaging are improved. [DDPC-5559]
File names on the Start menu are now correctly translated into French. [DDPC-5895]
Technical Advisories
43