CAUTION:
If you are installing the Sophos encryption software for the first
time, we strongly recommend that you enable and test each setting
step-by-step.
You can install encryption software automatically on Windows XP, Windows Vista and
Windows 7 computers.
Before you install the software on computers, you must:
- Make sure that drives encrypted with third-party encryption software have been
decrypted and that the third-party encryption software is uninstalled.
- Create a full backup of the data.
Further prepare as follows:
- Make sure that you have carried out the steps as described in Prepare for installation of encryption software, in particular that the Sophos
anti-virus software has been installed.
- Make sure that you have subscribed to and downloaded the encryption software.
For further information, see Subscribe to encryption software.
- If you use role-based administration, you must have the Computer
search, protection and groups and Policy setting -
full disk encryption right to install and configure encryption
on computers. For more information, see About roles and sub-estates.
To install encryption software on computers automatically:
-
In Enterprise Console, select the computers on which you want to install full
disk encryption.
-
Right-click the computers, and then click Protect
Computers. The Protect Computers Wizard
is launched.
-
On the Welcome page, click
Next.
-
On the Installation Type page, select
Encryption software.
-
If there is more than one encryption subscription and installer location
(bootstrap location) available, the Encryption location
page is displayed. Select the Encryption subscription and
Address to install from.
-
On the Encryption summary page, any problems with
installation are shown in the Encryption issues column.
Troubleshoot the installation (see Sophos Endpoint Security and Control installation failed)
or carry out manual installation on these computers (see the Sophos
Enterprise Console advanced startup guide).
-
On the Credentials page, enter details of an account
which can be used to install software.
This account is typically a domain administrator account. It must:
- Have local administrator rights
on computers you want to protect.
- Be able to log on to the
computer where you installed the management server.
- Have read access to the Primary
server location specified in the Updating policy.
See About update server locations and other topics in section
Configuring update server locations.
Note: If you are using a domain account, you must enter the username in
the form domain\user. If the computers are on
different domains covered by the same Active Directory schema, use the
Enterprise Administrator account in Active Directory instead.
Installation is staggered, so the process may not be complete on all the computers
for some time.
The installation of encryption will cause computers to restart automatically within
about 30 minutes after installation of the encryption software.
By default, full disk encryption is not enabled after installation. To enable it,
configure the full disk encryption policy to your needs and assign it to the
computers. For further information, see Configure full disk encryption.
For further information on the start behavior of the computer and first logon after
installation and activation of full disk encryption, see the Sophos Disk
Encryption 5.61 help or the Enterprise Console quick/advanced startup
guides.