Configure Challenge/Response

If you use role-based administration:

For more information, see About roles and sub-estates.

Challenge/Response helps users who cannot log on to their computers or access encrypted data. A Challenge/Response procedure involves the assistance of a help desk.

To configure Challenge/Response:

  1. Check which full disk encryption policy is used by the group or groups of computers you want to configure.
  2. In the Policies pane, double-click Full disk encryption. Then double-click the policy you want to change.
    The Full Disk Encryption dialog box is displayed.
  3. Under Power-on Authentication (POA), make sure that the Enable Power-on Authentication field is selected.
  4. Under Logon recovery methods, make sure that Challenge/Response (help desk needed) is selected.
  5. Click the Configure button next to Challenge/Response (help desk needed).
    The Configure Challenge/Response Welcome Text dialog box is displayed.
  6. In the text field, you can enter text that is displayed when the user initiates a Challenge/Response procedure in the Power-on Authentication. For example: "Please contact the help desk on the phone number 1234-56789." After you have entered the text click OK.
  7. Click OK.