Users Guide

Technical Advisories v8.5
Enterprise Edition for Windows
● After using the Managed Migration Utility, files that were encrypted with Personal Edition using the User Roaming key are
not accessible. To work around this issue, before migrating, ensure that the User Roaming key is not set for either the
Application Data Encryption Key or User Data Encryption Key policy. If the User Roaming key is used, change the key to
either Common or User, and save the policy change. Each user on the computer must log on and allow the encryption sweep
to complete. After encryption sweeps are complete for all users, run WSScan to ensure that no files are still encrypted with
the User Roaming key. Migration can now be performed. [DDPC-606]
● Pausing encryption is not reflected in the local console if the menu option "Process Encryption Only When Screen is Locked"
is enabled. [DDPC-620]
● After migrating a computer running Windows 8 or Windows 8.1 and using Windows' Fast Startup feature with the Managed
Migration Utility, a second restart is required for the migration to complete successfully. This is due to Windows' Fast
Startup feature, which logs off and hibernates the user, rather than restarting the computer. A second reboot completes the
migration. [DDPC-725]
● Amended 06/2015 - If the computer restarts during encryption with legacy HCA on Dell Latitude E5420 or E6420 or
Precision M4600 or M6600, the computer becomes unresponsive. [DDPMTR-341]
● Amended 06/2015 - On Dell Latitude E7250 and E7450, SDE rather than HCA encryption is provisioned. [DDPMTR-822]
● Amended 06/2015 - When running WSDeactivate, following the prompted reboot, the user is prompted to finish setup rather
than to enter the recovery key for activation as expected. [DDPMTR-1213]
● The computer does not single sign-on after resuming from Sleep-to-Hibernate. After the user enters their credentials at
the Preboot Authentication (PBA) screen, the computer stops at the Windows logon screen and the user must manually
log on to the computer. Dell Security Tools and Encryption do not support Sleep-to-Hibernate and single sign-on. Disable
Sleep-to-Hibernate when using Preboot Authentication if your organization intends to use single sign-on. [MMW-841]
Advanced Authentication
● After migrating with the Managed Migration Utility, a user may not be able to authenticate with enrolled fingerprints. To
work around this issue, change the policy to require only password authentication. The user should log on and re-enroll
fingerprints. After re-enrollment, the user will be able to log on with fingerprints. [MMW-573]
● Password Manager does not support Google Chrome v35 and later, due to a change in the way Chrome handles extensions.
[MMW-619, MMW-754]
● Password Manager does not support importing credentials from Internet Explorer 10 and 11 (because the interface is not
published by Microsoft). [MMW-770]
● On computers running ActivClient 7, single sign-on may not function properly. Also, multiple smart card icons may display in
the Windows credential provider screen. [MMW-837]
● When Preboot Authentication is activated on a computer with more than one user and with only fingerprint authentication
enabled, if two or more users enroll with the same fingerprint, at authentication for second and subsequent users an
error message may display, "The fingerprint is not verified." However, the first user is able to authenticate successfully.
[MMW-848]
● Eikon external fingerprint readers do not function properly on Windows 8.1 without the latest drivers. To work around this
issue, when using an external fingerprint reader, download and install the latest drivers required for your specific reader.
[MMW-880]
Preboot Authentication
● When upgrading from pre-v8.2 Enterprise Edition, Preboot Authentication must be deactivated before beginning the
upgrade. After the upgrade, the PBA is activated normally. [DDPC-636]
● On a UEFI laptop computer with the PBA activated, when the computer is docked or attached to an external monitor, the
laptop lid must remain open in order for the PBA to function properly. [DDPUP-507]
● On a computer with multiple users the Windows Power Option, Require a password on wakeup, must be enabled. If this
option is not enabled, when the computer resumes from hibernation, it resumes in the user account in which hibernation
occurred. This behavior is typical of Windows hibernation. [MMW-761]
● After activating Preboot Authentication on a UEFI computer, when the computer resumes from hibernation for the first
time following PBA activation, the process becomes a cold boot. After the first hibernation, the computer resumes from
hibernation normally. To work around this issue, restart the computer a second time after PBA activation. [MMW-844]
Technical Advisories
71