Symantec Endpoint Encryption Full Disk Maintenance Pack Release Notes Thank you for using this Symantec Corporation product. These Release Notes contain important information regarding this release of Symantec Endpoint Encryption Full Disk. Symantec Corporation strongly recommends you read this entire document. Symantec Corporation welcomes your comments and suggestions. You can use the information in Contacting Technical Support to contact us. Product: Symantec Endpoint Encryption Full Disk 8.2.1.MP10 (Maintenance Pack 10) Symantec Endpoint Encryption Framework 8.2.1.MP10 (Maintenance Pack 10) Warning: Export of this software may be restricted by the U.S. government. Note: To view the most recent version of this document, go to the Products section on the Symantec Corporation website. www.symantec.com What's Included in This File About Symantec Endpoint Encryption Full Disk Installation Notes Changes in Maintenance Pack 10 Changes in Maintenance Pack 9 Changes in Maintenance Pack 8 Changes in Maintenance Pack 7 Changes in Maintenance Pack 6 Changes in Maintenance Pack 5 Changes in Maintenance Pack 4 Changes in Maintenance Pack 3 Changes in Maintenance Pack 2 Changes in Maintenance Pack 1 Additional Information Information for Mac OS X Technical Support Copyright and Trademarks About Symantec Endpoint Encryption Full Disk Symantec Endpoint Encryption Full Disk ensures that only authorized users can access data stored on hard disks. This safeguards enterprises from the accidental loss or theft of a laptop or computer and eliminates the legal need for public disclosure.
Symantec Endpoint Encryption Full Disk provides seamless integration with Microsoft Active Directory for fast, simple deployment of endpoint data protection controls in a familiar administrative environment. Symantec Endpoint Encryption Full Disk includes a server and client installation. The Mac OS X client is powered by Symantec Encryption Desktop. Installation Notes In General Symantec Endpoint Encryption Framework 8.2.1.MP10 is only compatible with Symantec Endpoint Encryption Full Disk 8.2.1.MP10 and Symantec Endpoint Encryption Removable Storage 8.2.1.MP10. If you are running Symantec Endpoint Encryption Removable Storage and plan to upgrade to Symantec Endpoint Encryption Full Disk 8.2.1.MP10, you must also upgrade to Symantec Endpoint Encryption Removable Storage 8.2.1.MP10. For Mac OS X Installations For information on installing this maintenance pack release including information on upgrading the operating system see the section Information for Mac OS X. Changes in Maintenance Pack 10 3181991 Resolved an issue so that when a registered Windows user uses a PIV card to log onto a Microsoft Windows 7 system with the Smart Card Pass-Through feature enabled through the Citrix environment, the SEE client does not synchronize the PIV card's PIN to be the updated Windows password. 3210971 The SEE Full Disk now supports recovery of encrypted drives using Windows Preinstallation Environment (WinPE) 64-bit Access and Recover utilities. 3224620 Resolved an issue with SEE Management Server so that the reports generated now does not contain any duplicate or incorrect entries for computers. 3242278 Resolved an issue so that HP Compaq Pro 6305 systems running Microsoft Windows 7 boots up successfully after encrypting a drive with SEE Full Disk. 3298427 Resolved an issue that prevented users from booting successfully into safe mode on Dell Latitude E5420 systems encrypted with SEE Full Disk. 3281547 Resolved multiple issues with OPAL drives. To optimize data protection on OPAL drives and enable OPAL support, decrypt the disk, uninstall SEE Full Disk, and reinstall SEE Full Disk 8.2.1 MP10, and then encrypt your disk. 3345801 3401003 Resolved an issue so that a Ricoh SmartCard Reader now recognizes PIV cards used for pre-boot authentication on the following systems installed with SEE Full Disk: HP Elitebook 6930p HP Elitebook 8440p Symantec Endpoint Encryption Full Disk 8.2.1.MP10 Page 2 of 12
Changes in Maintenance Pack 9 3190793 Resolved an issue so that users no longer receive a rebooting error when the drive controller mode is set to SATA, AHCI, or Compatibility, on a Panasonic Toughbook CF-H2FRJJK1M system with SEE Full Disk installed. 3235103 Resolved an issue on a HP EliteBook 2570p system installed with SEE Full Disk so that the system reboots properly after encryption. 3195394 Resolved an issue so that users using WinPE 3.0, can now access and authenticate to encrypted drives with the SEE Full Disk Access Utility through the command line. 3067274 Resolved an issue so that users can now boot successfully into the safe mode on a Dell Latitude E6220 system encrypted with SEE Full Disk. Changes in Maintenance Pack 8 3177869 Resolved an issue on HP EliteBook 8440w systems with SEE Full Disk so that an error message no longer appears during encryption. 3067274 3043300 Resolved an issue that prevented users from booting successfully into safe mode on the following systems encrypted with SEE Full Disk: Dell Latitude E6220 Dell Latitude E6320 3232646 Multiple users can now access the same computer using their unique PIV cards. Changes in Maintenance Pack 7 2831558 Users can now open the SEE User Client by double-clicking the User Client tray icon. 3120065 Resolved an issue so that an appropriate message now appears during pre-boot authentication, directing the user to the Password Logon screen. 3103108 3129744 3022146 Resolved an issue that prevented users from booting successfully into Microsoft Windows after authentication on the following systems with SEE Full Disk installed: HP EliteBook 2760p HP ProBook 6565b Dell Latitude E6320 3134178 Resolved an issue so that users can boot successfully into Microsoft Windows on HP ProBook 6475b without receiving error messages. 3162235 Resolved an issue that prevented users from rebooting successfully when encryption or decryption was in progress on HP EliteBook 8460p systems. Symantec Endpoint Encryption Full Disk 8.2.1.MP10 Page 3 of 12
3055029 Resolved an issue that prevented users from rebooting successfully when encryption or decryption was in progress on HP EliteBook 8460p systems running in IDE mode. 3106903 Resolved a reboot issue with systems having Micron Solid State Drive, model MTFDDAK128MAM-1J1. 3141474 Resolved an issue that prevented Microsoft Windows from resuming successfully after hibernation on Lenovo ThinkPad W510, Lenovo ThinkPad T410, Lenovo ThinkPad X201, Dell OptiPlex 755, Dell OptiPlex 760, and Dell OptiPlex 780 with SEE Full Disk installed. 3120050 Resolved an issue so that when a registered user changes their Windows password using Ctrl+Alt+Del while logged on with a PIV card, SEE Full Disk does not consider the user to be a new user and does not prompt the user for new user registration. Changes in Maintenance Pack 6 2827409 Resolved an issue on HP EliteBook 8440p Notebooks with SEE Full Disk installed so that no error message appears for non-token users. 2939399 Users can now access and authenticate to encrypted drives with the SEE Full Disk Access Utility using the command line. 2981573 Resolved an incompatibility with the storage controller using the IDE mode on the HP EliteBook 2170p systems. 2981665 Resolved an issue so that users no longer receive a blue screen error on booting when the drive controller is set to AHCI on a Panasonic Toughbook CF-C1 system with SEE Full Disk installed. 3014016 Resolved the issue so that Sony VAIO SVE11115ENB systems successfully boot after the installation of SEE Full Disk. 3014030 Resolved the issue so that Sony VAIO SVT13113ENS systems successfully boot after the installation of SEE Full Disk. 3015047 Resolved an issue so that the Autologon policy works properly when the end time for pre-boot authentication bypass is set to cross midnight. 3047718 Resolved an issue that prevented users from booting successfully into Microsoft Windows after authentication on HP ProBook 6465b. 3083724 Resolved an issue so that SEE Full Disk uses optimal time to encrypt a partition on systems that use Advanced Format drives with the "Include unused disk space when encrypting" policy set to "No." 2941534 Resolved an incompatibility with the storage controller using the IDE mode on the HP EliteBook 2570p systems. 2949413 Resolved an issue that prevented a user from authenticating at SEE Full Disk pre-boot on HP Compaq Pro 6300 Microtower PC (with Intel Core i3) systems running in IDE mode. Symantec Endpoint Encryption Full Disk 8.2.1.MP10 Page 4 of 12
Changes in Maintenance Pack 5 2849173 Resolved an issue so that the PIV card/smartcard reader and the USB-attached keyboard function properly during pre-boot authentication on HP 8470p computers. 2863243 2897210 2980703 Resolved an issue so that users no longer see the Unsupported Storage Controller message in the pre-boot environment when the Storage Mode is set to ATA on the following systems: Dell Optiplex 7010 Dell Latitude E6430 Lenovo ThinkPad X230 2867979 Resolved an issue that prevented an HP Pavilion g6-1325sa user from booting successfully into Microsoft Windows after authentication with SEE Full Disk installed. 2964816 2964792 Resolved an incompatibility with the storage controller using the IDE mode on the following systems: HP EliteBook 8470p HP EliteBook 8770w 3017861 Resolved an issue that prevented a Dell e610 user from booting successfully into Microsoft Windows after authenticating with SEE Full Disk installed. 3023399 Resolved the issue so that HP EliteBook 8460p computers successfully boot up after reboot. 3023436 3039420 3001479 Resolved an incompatibility with the storage controller on the following systems: Dell Latitude E6530, E6430, and E6230 Dell Latitude E6430 3029837 Resolved an issue so that SEE Full Disk boots successfully on Dell Latitude D620 computers. 2906876 Resolved an issue so that Dell Latitude D610 successfully runs after initializing Symantec Endpoint Protection. 2990171 Resolved an issue so that Dell Latitude D620 successfully boots up after an installation or upgrade of SEE Full Disk. Changes in Maintenance Pack 4 2824641 Resolved the issue so that HP Z400 Workstation successfully boots up with SATA settings as IDE. 2860347 Resolved an issue so that a Dell Latitude E6510 computer running Microsoft Windows 7 boots up successfully after SEE Full Disk user registration. 2665845 Resolved an incompatibility with the storage controller on Dell Latitude ST systems. 2853802 Resolved an incompatibility with USB controllers on Samsung NP-P560 notebooks. Symantec Endpoint Encryption Full Disk 8.2.1.MP10 Page 5 of 12
2891779 Resolved an incompatibility issue so that 2048-bit certificates on HID Crescendo 700 smart cards work with SEE Full Disk for pre-boot authentication. 2883401 Resolved an issue that prevented a Dell Optiplex GX620 or Dell Optiplex 755 user from booting successfully into Windows after authentication with SEE Full Disk installed. Changes in Maintenance Pack 3 2815597 Resolved the issue that prevented a user authenticating at SEE Full Disk pre-boot on Lenovo e525 systems after upgrading to SEE Framework 8.2.1 MP2. 2620606 Resolved the issue that caused HP Z200 Workstations to stop responding at the second reboot after the installation of SEE Full Disk 8.2 MP1 HF2 on Microsoft Windows XP SP3. 2875367 Resolved an issue on Lenovo ThinkPad L420 and Lenovo ThinkPad L520 systems with SEE Full Disk 8.2.1 MP1 installed so that the following message does not appear after pre-boot authentication or after updating the chipset, keyboard, mouse, input, video and storage drivers: No physical memory is available at the location required for the Windows Boot Manager. The system cannot continue. 2546629 Resolved an issue on Fujitsu T5010 systems where a smart card, such as an Axalto card, could not be detected when inserted into the built-in reader. Changes in Maintenance Pack 2 2714423 2773154 2855047 2829054 2658299 Resolved an incompatibility with the storage controller on the following systems: Dell Optiplex 755 HP Slate 2 HP 6300 HP Z820 Panasonic CF-S10CDHZ1M 2851656 Resolved an issue that prevented successful installation of SEE Full Disk. 2829219 Resolved a boot issue with the Sony Vio VPCZ22SHX. 2733067 2855023 2665566 2665567 2656082 Resolved an issue that prevents users from using a USB keyboard and mouse for pre-boot authentication. Resolved a reboot issue with HP 8560p and HP ProBook 6560p systems. Symantec Endpoint Encryption Full Disk 8.2.1.MP10 Page 6 of 12
2656082 Resolved an incompatibility issue during system boot on the Dell E5520 running Microsoft Windows 7. 2750145 Users are now able to use USB after pre-boot authentication for the following systems: Dell 990 Dell 780 Dell 760 Dell 755 HP 5750 2667705 Resolved an issue to enable users to successfully save a downloaded file to a USB drive. Changes in Maintenance Pack 1 2822272 2723743 2784452 2797647 Resolved the issue so that HP ProBook 6465b users no longer receive the unsupported storage controller error. Resolved the issue so that HP Z400 Workstation successfully boots up with SATA settings as IDE. 2551107 Resolved the issue so that a Dell Vostro 3750 system with an encrypted hard drive successfully shuts down within seconds. 2654081 Resolved incompatibility issues between SEE Full Disk and Microsoft System Center Configuration Manager (SCCM) 2007 so that systems can be repartitioned and reimaged without error. 2747326 Resolved the issue so that pre-boot authentication and the operating system now load successfully on Sony Vaio PCG31311L systems. 2713393 Resolved the issue so that SEE Full Disk now installs successful on Dell Precision M6600 systems. Additional Information Documentation Errata Microsoft Windows Server 2008 R2 Support Microsoft Windows Server 2008 R2 has been included as a compatible database for the SEE Removable Storage version 8.2.1 MP10. Opal Support For a current list of certified hardware for Opal support, visit http://www.symantec.com/docs/s:tech165854. Symantec Endpoint Encryption Full Disk 8.2.1.MP10 Page 7 of 12
Known Issues Issue Workaround 2551106 On certain Dell Latitude systems, the Token Authentication method fails displaying the following message, The inserted token could not be recognized." 2887470 On Hitachi drives, especially on their Advanced Format drives with 512e mode, encryption is very slow. To work around this issue, configure password authentication as the only authentication method in the Registered Users options of the Framework Computer Policy. Note: Symantec recommends that you back up the Windows Registry before making any changes. To optimize encryption on these Hitachi drives, perform the following steps: 1. Open your Windows Registry. 2. Go to the [HKEY_LOCAL_MACHINE]\SOFTWARE\Encrypt ion Anywhere\Hard Disk\Initial Computer Data key. 3. Create a new DWORD Value and name it as EnableOptimization. 4. Set the Value data to 1. To disable optimization set the Value data to 0. 5. Restart the computer for the change to take effect. 2827186 For systems running Microsoft Windows Vista and later, hibernation is not supported during encryption or decryption operations. To avoid data corruption, disable hibernation until the disk is fully encrypted or decrypted. 2550896 2550864 On Microsoft Windows, sometimes an error appears in pre-boot when you attempt to switch to a different token from the one you used to log in with. Symantec Endpoint Encryption Full Disk 8.2.1.MP10 Page 8 of 12
Issue Workaround 2887470 On Hitachi drives, especially on their Advanced Format drives with 512e mode, encryption is very slow. To optimize encryption on these Hitachi drives, perform the following steps: Note: Take care when editing the Windows Registry. Symantec Corporation recommends that you back up the Windows Registry before making any changes. 1. Open your Windows Registry. 2. Go to the [HKEY_LOCAL_MACHINE\SOFTWARE\Encrypti on Anywhere\Hard Disk\Initial Computer Data] key. 3. Create a new DWORD Value and name it as EnableOptimization. 4. Set the Value data to 1. To disable optimization set the Value data to 0. 5. Restart the computer for the change to take effect. Updates to Previous Known Issues Hardware Workaround MA22221/2549126, 2822561 Any computer/ hardware Users cannot use USB 3.0 devices, such as keyboards and mice during pre-windows authentication. Users should open laptop and use the internal keyboard and mouse pad to complete pre- Windows authentication. Information for Mac OS X Installing This Maintenance Pack on the Mac OS X Client To install this maintenance pack release at the same time as you are upgrading the operating system, see the note following the instructions. The Java Runtime Engine (JRE) is required when installing Symantec Endpoint Encryption Full Disk on Mac OS X version 10.7 (Lion). During Symantec Endpoint Encryption Full Disk installation, you are prompted to install the JRE if it is not present on your system. If you choose not to install the JRE, the installation of Symantec Endpoint Encryption Full Disk will not continue. To install Symantec Endpoint Encryption Full Disk on your Mac OS X system: 1. Ensure the client can access the client installation package zipped file. 2. Log on to the Mac OS X client using administrative privileges. 3. Close all applications. 4. Double-click the client installation package zipped file. 5. Open the pgpdesktop directory. 6. Double-click the PGP.pkg file. 7. Follow the on-screen instructions. 8. If prompted to do so, restart your system. Symantec Endpoint Encryption Full Disk 8.2.1.MP10 Page 9 of 12
For additional information, including upgrade instructions, see the Symantec Endpoint Encryption Full Disk for Mac OS X User's Guide. Note: If you are upgrading your computer to a new major release of Mac OS X (such as from 10.6 to 10.7) and want to use this version of Symantec Endpoint Encryption Full Disk, be sure to uninstall any previous versions of Symantec Endpoint Encryption Full Disk before upgrading to the new version of Mac OS X and installing this release. You will need to unencrypt your disk before you can uninstall Symantec Endpoint Encryption Full Disk. Upgrading Your Operating System This maintenance pack provides compatibility with Mac OS X 10.7. To upgrade your computer to the new release of Mac OS X, be sure to use the following procedure. To upgrade your operating system and install this version of Symantec Endpoint Encryption Full Disk: 1. If your disk is encrypted, decrypt the disk. 2. Uninstall Symantec Endpoint Encryption Full Disk. 3. Upgrade your system to the new version of Mac OS X. 4. Install this maintenance release of Symantec Endpoint Encryption Full Disk 8.2.1. 5. Encrypt your disk. Note: This version of Symantec Endpoint Encryption Full Disk is not compatible with Apple Boot Camp, included with Mac OS X. Technical Support Symantec Technical Support maintains support centers globally. Technical Support s primary role is to respond to specific queries about product features and functionality. The Technical Support group also creates content for our online Knowledge Base. The Technical Support group works collaboratively with the other functional areas within Symantec to answer your questions in a timely fashion. For example, the Technical Support group works with Product Engineering and Symantec Security Response to provide alerting services and virus definition updates. Symantec s support offerings include the following: A range of support options that give you the flexibility to select the right amount of service for any size organization Telephone and/or web-based support that provides rapid response and up-to-the-minute information Upgrade assurance that delivers software upgrades Global support purchased on a regional business hours or 24 hours a day, 7 days a week basis Premium service offerings that include Account Management Services For information about Symantec s support offerings, you can visit our website at the following URL: www.symantec.com/business/support/ All support services will be delivered in accordance with your support agreement and the then-current enterprise technical support policy. Symantec Endpoint Encryption Full Disk 8.2.1.MP10 Page 10 of 12
Contacting Technical Support Customers with a current support agreement may access Technical Support information at the following URL: www.symantec.com/business/support/ Before contacting Technical Support, make sure you have satisfied the system requirements that are listed in your product documentation. Also, you should be at the computer on which the problem occurred, in case it is necessary to replicate the problem. When you contact Technical Support, please have the following information available: Product release level Hardware information Available memory, disk space, and NIC information Operating system Version and patch level Network topology Router, gateway, and IP address information Problem description: Error messages and log files Troubleshooting that was performed before contacting Symantec Recent software configuration changes and network changes Licensing and Registration If your Symantec product requires registration or a license key, access our technical support web page at the following URL: www.symantec.com/business/support/ Customer Service Customer service information is available at the following URL: www.symantec.com/business/support/ Customer Service is available to assist with non-technical questions, such as the following types of issues: Questions regarding product licensing or serialization Product registration updates, such as address or name changes General product information (features, language availability, local dealers) Latest information about product updates and upgrades Information about upgrade assurance and support contracts Information about the Symantec Buying Programs Advice about Symantec's technical support options Nontechnical presales questions Issues that are related to CD-ROMs or manuals Symantec Endpoint Encryption Full Disk 8.2.1.MP10 Page 11 of 12
Support Agreement Resources If you want to contact Symantec regarding an existing support agreement, please contact the support agreement administration team for your region as follows: Asia-Pacific and Japan customercare_apac@symantec.com Europe, Middle-East, Africa semea@symantec.com North America, Latin America supportsolutions@symantec.com Copyright and Trademarks Copyright (c) 2014 Symantec Corporation. All rights reserved. Symantec, the Symantec Logo, the Checkmark Logo, PGP, Pretty Good Privacy, and the PGP logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. Symantec Endpoint Encryption Full Disk 8.2.1.MP10 Page 12 of 12