Configure Challenge/Response

If you use role-based administration:

You must have the Policy setting - full disk encryption right to edit a full disk encryption policy.
You cannot edit a policy if it is applied outside your active sub-estate.
In the full disk encryption policy, the Enable Power-on Authentication field must be selected.

For more information, see About roles and sub-estates.

Challenge/Response helps users who cannot log on to their computers or access encrypted data. A Challenge/Response procedure involves the assistance of a help desk.

To configure Challenge/Response:

Check which full disk encryption policy is used by the group or groups of computers you want to configure.
See Check which policies a group uses.
In the Policies pane, double-click Full disk encryption. Then double-click the policy you want to change.
The Full Disk Encryption dialog box is displayed.
Under Power-on Authentication (POA), make sure that the Enable Power-on Authentication field is selected.
Under Logon recovery methods, make sure that Challenge/Response (help desk needed) is selected.
Click the Configure button next to Challenge/Response (help desk needed).
The Configure Challenge/Response Welcome Text dialog box is displayed.
In the text field, you can enter text that is displayed when the user initiates a Challenge/Response procedure in the Power-on Authentication. For example: "Please contact the help desk on the phone number 1234-56789." After you have entered the text click OK.
Click OK.