Users Guide

Table Of Contents
Resolved Technical Advisories v8.1
All Products
Windows Vista is no longer a supported operating system.
Enterprise Edition for Windows
The Dell Data Protection | Encryption v8.x conflict with Symantec Endpoint Protection v12.x. has been resolved. The
SEP v12.x product uses 2 separate filter drivers which led to a dead-lock with the re-architected Dell Data Protection |
Encryption v8.x file encryption driver. [27660]
A registry override has been created to allow SDE encryption on a self-encrypting drive. By default, the 8.x client disables
SDE encryption if a self-encrypting drive is detected on the computer. It does not matter if the drive is the primary disk
or not. This can be a problem if the customer only wishes to use SDE encryption and has a self-encrypting drive that is
not configured. Use this registry setting to always enable SDE on a self-encrypting drive that is not configured. A reboot is
required for this setting to take effect. [27565]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\CMGShield]
AlwaysApplySDE=REG_DWORD:1
VPN connection events are now reported to the Shield. The use of CREDActivate for remote user activation is no longer
required. [27143]
The prompt to enter an EAP and escrow keys when remotely managed no longer displays. [27600]
If a user has the Secure Windows Credentials policy enabled, they can now log in using cached credentials following the use
of WSDeactivate. [27612]
If an SDE encrypted file is moved (not copied) to a Common or User encrypted folder, the Shield now properly applies the
Common or User encryption policy, rather than remaining SDE encrypted. [27752]
Enterprise Edition for SED
SED recovery question for v7.3 and earlier have been added back to the Enterprise Server.
Advanced Authentication
The Tab key can now be used to navigate through the recovery questions in the Security Console. [26974]
When using Password Manager, the default values in the Live.com/Hotmail.com credential fields are now correct. [27033]
The Authentication tab in the Security Console no longer displays a blank page after switching tabs. [27112]
Technical Advisories v8.1
Enterprise Edition for Windows
When running Windows 8, the Shield's Fast User Switching message is hidden behind the Windows 8 log off screen. [26272]
DVDs become corrupt after a PCS policy change to Read Only in the following scenario: When PCS is enabled for Optical
Drives with 'UDF-Only' policy and the user copies files over (opens a session), before the session is closed (usually by
ejecting the media) a new PCS policy comes down that sets the optical drive to 'Read-Only'. The Shield starts a reboot-
snooze cycle when changing from 'UDF-Only' to another policy. If the user accepts the reboot request, Windows reboots
without closing the session, because it assumes it can close after the reboot. However, after the reboot, the device is in
'Read-Only' mode and Windows cannot close the session, so whatever filesystem changes had been made in that session are
now unrecoverable. [26966]
84
Technical Advisories