Symantec Endpoint Encryption Full Disk Maintenance Pack Release Notes

Transcription

1 Symantec Endpoint Encryption Full Disk Maintenance Pack Release Notes Thank you for using this Symantec Corporation product. These Release Notes contain important information regarding this release of Symantec Endpoint Encryption Full Disk. Symantec Corporation strongly recommends you read this entire document. Symantec Corporation welcomes your comments and suggestions. You can use the information in Contacting Technical Support to contact us. Product: Symantec Endpoint Encryption Full Disk MP9 (Maintenance Pack 9) Symantec Endpoint Encryption Framework MP9 (Maintenance Pack 9) Warning: Export of this software may be restricted by the U.S. government. Note: To view the most recent version of this document, go to the Products section on the Symantec Corporation website. What's Included in This File About Symantec Endpoint Encryption Full Disk Installation Notes Changes in Maintenance Pack 9 Changes in Maintenance Pack 8 Changes in Maintenance Pack 7 Changes in Maintenance Pack 6 Changes in Maintenance Pack 5 Changes in Maintenance Pack 4 Changes in Maintenance Pack 3 Changes in Maintenance Pack 2 Changes in Maintenance Pack 1 Additional Information Information for Mac OS X Technical Support Copyright and Trademarks About Symantec Endpoint Encryption Full Disk Symantec Endpoint Encryption Full Disk ensures that only authorized users can access data stored on hard disks. This safeguards enterprises from the accidental loss or theft of a laptop or computer and eliminates the legal need for public disclosure.

2 Symantec Endpoint Encryption Full Disk provides seamless integration with Microsoft Active Directory for fast, simple deployment of endpoint data protection controls in a familiar administrative environment. Symantec Endpoint Encryption Full Disk includes a server and client installation. The Mac OS X client is powered by Symantec Encryption Desktop. Installation Notes In General Symantec Endpoint Encryption Framework MP9 is only compatible with Symantec Endpoint Encryption Full Disk MP9 and Symantec Endpoint Encryption Removable Storage MP9. If you are running Symantec Endpoint Encryption Removable Storage and plan to upgrade to Symantec Endpoint Encryption Full Disk MP9, you must also upgrade to Symantec Endpoint Encryption Removable Storage MP9. For Mac OS X Installations For information on installing this maintenance pack release including information on upgrading the operating system see the section Information for Mac OS X. Changes in Maintenance Pack Resolved an issue so that users no longer receive a rebooting error when the drive controller mode is set to SATA, AHCI, or Compatibility, on a Panasonic Toughbook CF-H2FRJJK1M system with SEE Full Disk installed Resolved an issue on a HP EliteBook 2570p system installed with SEE Full Disk so that the system reboots properly after encryption Resolved an issue so that users using WinPE 3.0, can now access and authenticate to encrypted drives with the SEE Full Disk Access Utility through the command line Resolved an issue so that users can now boot successfully into the safe mode on a Dell Latitude E6220 system encrypted with SEE Full Disk. Changes in Maintenance Pack Resolved an issue on HP EliteBook 8440w systems with SEE Full Disk so that an error message no longer appears during encryption Resolved an issue that prevented users from booting successfully into safe mode on the following systems encrypted with SEE Full Disk: Dell Latitude E6220 Dell Latitude E Multiple users can now access the same computer using their unique PIV cards. Symantec Endpoint Encryption Full Disk MP9 Page 2 of 11

3 Changes in Maintenance Pack Users can now open the SEE User Client by double-clicking the User Client tray icon Resolved an issue so that an appropriate message now appears during pre-boot authentication, directing the user to the Password Logon screen Resolved an issue that prevented users from booting successfully into Microsoft Windows after authentication on the following systems with SEE Full Disk installed: HP EliteBook 2760p HP ProBook 6565b Dell Latitude E Resolved an issue so that users can boot successfully into Microsoft Windows on HP ProBook 6475b without receiving error messages Resolved an issue that prevented users from rebooting successfully when encryption or decryption was in progress on HP EliteBook 8460p systems Resolved an issue that prevented users from rebooting successfully when encryption or decryption was in progress on HP EliteBook 8460p systems running in IDE mode Resolved a reboot issue with systems having Micron Solid State Drive, model MTFDDAK128MAM-1J Resolved an issue that prevented Microsoft Windows from resuming successfully after hibernation on Lenovo ThinkPad W510, Lenovo ThinkPad T410, Lenovo ThinkPad X201, Dell OptiPlex 755, Dell OptiPlex 760, and Dell OptiPlex 780 with SEE Full Disk installed Resolved an issue so that when a registered user changes their Windows password using Ctrl+Alt+Del while logged on with a PIV card, SEE Full Disk does not consider the user to be a new user and does not prompt the user for new user registration. Changes in Maintenance Pack Resolved an issue on HP EliteBook 8440p Notebooks with SEE Full Disk installed so that no error message appears for non-token users Users can now access and authenticate to encrypted drives with the SEE Full Disk Access Utility using the command line Resolved an incompatibility with the storage controller using the IDE mode on the HP EliteBook 2170p systems Resolved an issue so that users no longer receive a blue screen error on booting when the drive controller is set to AHCI on a Panasonic Toughbook CF-C1 system with SEE Full Disk installed Resolved the issue so that Sony VAIO SVE11115ENB systems successfully boot after the installation of SEE Full Disk. Symantec Endpoint Encryption Full Disk MP9 Page 3 of 11

4 Number Description Resolved the issue so that Sony VAIO SVT13113ENS systems successfully boot after the installation of SEE Full Disk Resolved an issue so that the Autologon policy works properly when the end time for pre-boot authentication bypass is set to cross midnight Resolved an issue that prevented users from booting successfully into Microsoft Windows after authentication on HP ProBook 6465b Resolved an issue so that SEE Full Disk uses optimal time to encrypt a partition on systems that use Advanced Format drives with the "Include unused disk space when encrypting" policy set to "No." Resolved an incompatibility with the storage controller using the IDE mode on the HP EliteBook 2570p systems Resolved an issue that prevented a user from authenticating at SEE Full Disk pre-boot on HP Compaq Pro 6300 Microtower PC (with Intel Core i3) systems running in IDE mode. Changes in Maintenance Pack Resolved an issue so that the PIV card/smartcard reader and the USB-attached keyboard function properly during pre-boot authentication on HP 8470p computers Resolved an issue so that users no longer see the Unsupported Storage Controller message in the pre-boot environment when the Storage Mode is set to ATA on the following systems: Dell Optiplex 7010 Dell Latitude E6430 Lenovo ThinkPad X Resolved an issue that prevented an HP Pavilion g6-1325sa user from booting successfully into Microsoft Windows after authentication with SEE Full Disk installed Resolved an incompatibility with the storage controller using the IDE mode on the following systems: HP EliteBook 8470p HP EliteBook 8770w Resolved an issue that prevented a Dell e610 user from booting successfully into Microsoft Windows after authenticating with SEE Full Disk installed Resolved the issue so that HP EliteBook 8460p computers successfully boot up after reboot , Resolved an incompatibility with the storage controller on the following systems: Dell Latitude E6530, E6430, and E6230 Dell Latitude E Resolved an issue so that SEE Full Disk boots successfully on Dell Latitude D620 computers. Symantec Endpoint Encryption Full Disk MP9 Page 4 of 11

5 Number Description Resolved an issue so that Dell Latitude D610 successfully runs after initializing Symantec Endpoint Protection Resolved an issue so that Dell Latitude D620 successfully boots up after an installation or upgrade of SEE Full Disk. Changes in Maintenance Pack Resolved the issue so that HP Z400 Workstation successfully boots up with SATA settings as IDE Resolved an issue so that a Dell Latitude E6510 computer running Microsoft Windows 7 boots up successfully after SEE Full Disk user registration Resolved an incompatibility with the storage controller on Dell Latitude ST systems Resolved an incompatibility with USB controllers on Samsung NP-P560 notebooks Resolved an incompatibility issue so that 2048-bit certificates on HID Crescendo 700 smart cards work with SEE Full Disk for pre-boot authentication Resolved an issue that prevented a Dell Optiplex GX620 or Dell Optiplex 755 user from booting successfully into Windows after authentication with SEE Full Disk installed. Changes in Maintenance Pack Resolved the issue that prevented a user authenticating at SEE Full Disk pre-boot on Lenovo e525 systems after upgrading to SEE Framework MP Resolved the issue that caused HP Z200 Workstations to stop responding at the second reboot after the installation of SEE Full Disk 8.2 MP1 HF2 on Microsoft Windows XP SP Resolved an issue on Lenovo ThinkPad L420 and Lenovo ThinkPad L520 systems with SEE Full Disk MP1 installed so that the following message does not appear after pre-boot authentication or after updating the chipset, keyboard, mouse, input, video and storage drivers: No physical memory is available at the location required for the Windows Boot Manager. The system cannot continue Resolved an issue on Fujitsu T5010 systems where a smart card, such as an Axalto card, could not be detected when inserted into the built-in reader. Symantec Endpoint Encryption Full Disk MP9 Page 5 of 11

6 Changes in Maintenance Pack Resolved an incompatibility with the storage controller on the following systems: Dell Optiplex 755 HP Slate 2 HP 6300 HP Z820 Panasonic CF-S10CDHZ1M Resolved an issue that prevented successful installation of SEE Full Disk Resolved a boot issue with the Sony Vio VPCZ22SHX Resolved an issue that prevents users from using a USB keyboard and mouse for pre-boot authentication. Resolved a reboot issue with HP 8560p and HP ProBook 6560p systems Resolved an incompatibility issue during system boot on the Dell E5520 running Microsoft Windows Users are now able to use USB after pre-boot authentication for the following systems: Dell 990 Dell 780 Dell 760 Dell 755 HP Resolved an issue to enable users to successfully save a downloaded file to a USB drive. Changes in Maintenance Pack , , Resolved the issue so that HP ProBook 6465b users no longer receive the unsupported storage controller error. Resolved the issue so that HP Z400 Workstation successfully boots up with SATA settings as IDE Resolved the issue so that a Dell Vostro 3750 system with an encrypted hard drive successfully shuts down within seconds Resolved incompatibility issues between SEE Full Disk and Microsoft System Center Configuration Manager (SCCM) 2007 so that systems can be repartitioned and reimaged without error Resolved the issue so that pre-boot authentication and the operating system now load successfully on Sony Vaio PCG31311L systems. Symantec Endpoint Encryption Full Disk MP9 Page 6 of 11

7 Number Description Resolved the issue so that SEE Full Disk now installs successful on Dell Precision M6600 systems. Additional Information Opal Support For a current list of certified hardware for Opal support, visit Number Issue Description Workaround On certain Dell Latitude systems, the Token Authentication method fails displaying the following message, The inserted token could not be recognized." On Hitachi drives, especially on their Advanced Format drives with 512e mode, encryption is very slow. To work around this issue, configure password authentication as the only authentication method in the Registered Users options of the Framework Computer Policy. Note: Symantec recommends that you back up the Windows Registry before making any changes. To optimize encryption on these Hitachi drives, perform the following steps: 1. Open your Windows Registry. 2. Go to the [HKEY_LOCAL_MACHINE]\SOFTWARE\Encrypt ion Anywhere\Hard Disk\Initial Computer Data key. 3. Create a new DWORD Value and name it as EnableOptimization. 4. Set the Value data to 1. To disable optimization set the Value data to Restart the computer for the change to take effect. Symantec Endpoint Encryption Full Disk MP9 Page 7 of 11

8 Number Issue Description Workaround For systems running Microsoft Windows Vista and later, hibernation is not supported during encryption or decryption operations , On Microsoft Windows, sometimes an error appears in pre-boot when you attempt to switch to a different token from the one you used to log in with. To avoid data corruption, disable hibernation until the disk is fully encrypted or decrypted On Hitachi drives, especially on their Advanced Format drives with 512e mode, encryption is very slow. To optimize encryption on these Hitachi drives, perform the following steps: Note: Take care when editing the Windows Registry. Symantec Corporation recommends that you back up the Windows Registry before making any changes. 1. Open your Windows Registry. 2. Go to the [HKEY_LOCAL_MACHINE\SOFTWARE\Encrypti on Anywhere\Hard Disk\Initial Computer Data] key. 3. Create a new DWORD Value and name it as EnableOptimization. 4. Set the Value data to 1. To disable optimization set the Value data to Restart the computer for the change to take effect. Updates to Previous Known Issues Number Hardware Description Workaround MA22221/ , Any computer/hardware Users cannot use USB 3.0 devices, such as keyboards and mice during pre-windows authentication. Users should open laptop and use the internal keyboard and mouse pad to complete pre- Windows authentication. Symantec Endpoint Encryption Full Disk MP9 Page 8 of 11

9 Information for Mac OS X Installing This Maintenance Pack on the Mac OS X Client To install this maintenance pack release at the same time as you are upgrading the operating system, see the note following the instructions. The Java Runtime Engine (JRE) is required when installing Symantec Endpoint Encryption Full Disk on Mac OS X version 10.7 (Lion). During Symantec Endpoint Encryption Full Disk installation, you are prompted to install the JRE if it is not present on your system. If you choose not to install the JRE, the installation of Symantec Endpoint Encryption Full Disk will not continue. To install Symantec Endpoint Encryption Full Disk on your Mac OS X system: 1. Ensure the client can access the client installation package zipped file. 2. Log on to the Mac OS X client using administrative privileges. 3. Close all applications. 4. Double-click the client installation package zipped file. 5. Open the pgpdesktop directory. 6. Double-click the PGP.pkg file. 7. Follow the on-screen instructions. 8. If prompted to do so, restart your system. For additional information, including upgrade instructions, see the Symantec Endpoint Encryption Full Disk for Mac OS X User's Guide. Note: If you are upgrading your computer to a new major release of Mac OS X (such as from 10.6 to 10.7) and want to use this version of Symantec Endpoint Encryption Full Disk, be sure to uninstall any previous versions of Symantec Endpoint Encryption Full Disk before upgrading to the new version of Mac OS X and installing this release. You will need to unencrypt your disk before you can uninstall Symantec Endpoint Encryption Full Disk. Upgrading Your Operating System This maintenance pack provides compatibility with Mac OS X To upgrade your computer to the new release of Mac OS X, be sure to use the following procedure. To upgrade your operating system and install this version of Symantec Endpoint Encryption Full Disk: 1. If your disk is encrypted, decrypt the disk. 2. Uninstall Symantec Endpoint Encryption Full Disk. 3. Upgrade your system to the new version of Mac OS X. 4. Install this maintenance release of Symantec Endpoint Encryption Full Disk Encrypt your disk. Note: This version of Symantec Endpoint Encryption Full Disk is not compatible with Apple Boot Camp, included with Mac OS X. Symantec Endpoint Encryption Full Disk MP9 Page 9 of 11

10 Technical Support Symantec Technical Support maintains support centers globally. Technical Support s primary role is to respond to specific queries about product features and functionality. The Technical Support group also creates content for our online Knowledge Base. The Technical Support group works collaboratively with the other functional areas within Symantec to answer your questions in a timely fashion. For example, the Technical Support group works with Product Engineering and Symantec Security Response to provide alerting services and virus definition updates. Symantec s support offerings include the following: A range of support options that give you the flexibility to select the right amount of service for any size organization Telephone and/or web-based support that provides rapid response and up-to-the-minute information Upgrade assurance that delivers software upgrades Global support purchased on a regional business hours or 24 hours a day, 7 days a week basis Premium service offerings that include Account Management Services For information about Symantec s support offerings, you can visit our website at the following URL: All support services will be delivered in accordance with your support agreement and the then-current enterprise technical support policy. Contacting Technical Support Customers with a current support agreement may access Technical Support information at the following URL: Before contacting Technical Support, make sure you have satisfied the system requirements that are listed in your product documentation. Also, you should be at the computer on which the problem occurred, in case it is necessary to replicate the problem. When you contact Technical Support, please have the following information available: Product release level Hardware information Available memory, disk space, and NIC information Operating system Version and patch level Network topology Router, gateway, and IP address information Problem description: Error messages and log files Troubleshooting that was performed before contacting Symantec Recent software configuration changes and network changes Symantec Endpoint Encryption Full Disk MP9 Page 10 of 11

11 Licensing and Registration If your Symantec product requires registration or a license key, access our technical support web page at the following URL: Customer Service Customer service information is available at the following URL: Customer Service is available to assist with non-technical questions, such as the following types of issues: Questions regarding product licensing or serialization Product registration updates, such as address or name changes General product information (features, language availability, local dealers) Latest information about product updates and upgrades Information about upgrade assurance and support contracts Information about the Symantec Buying Programs Advice about Symantec's technical support options Nontechnical presales questions Issues that are related to CD-ROMs or manuals Support Agreement Resources If you want to contact Symantec regarding an existing support agreement, please contact the support agreement administration team for your region as follows: Asia-Pacific and Japan customercare_apac@symantec.com Europe, Middle-East, Africa semea@symantec.com North America, Latin America supportsolutions@symantec.com Copyright and Trademarks Copyright (c) 2013 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo, PGP, Pretty Good Privacy, and the PGP logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. Symantec Endpoint Encryption Full Disk MP9 Page 11 of 11