Install encryption software automatically

If you are installing the Sophos encryption software for the first time, we strongly recommend that you enable and test each setting step-by-step.

You can install encryption software automatically on Windows XP, Windows Vista and Windows 7 computers.

Before you install the software on computers, you must:

Further prepare as follows:

To install encryption software on computers automatically:

  1. In Enterprise Console, select the computers on which you want to install full disk encryption.
  2. Right-click the computers, and then click Protect Computers. The Protect Computers Wizard is launched.
  3. On the Welcome page, click Next.
  4. On the Installation Type page, select Encryption software.
  5. If there is more than one encryption subscription and installer location (bootstrap location) available, the Encryption location page is displayed. Select the Encryption subscription and Address to install from.
  6. On the Encryption summary page, any problems with installation are shown in the Encryption issues column. Troubleshoot the installation (see Sophos Endpoint Security and Control installation failed) or carry out manual installation on these computers (see the Sophos Enterprise Console advanced startup guide).
  7. On the Credentials page, enter details of an account which can be used to install software.
    This account is typically a domain administrator account. It must:
    • Have local administrator rights on computers you want to protect.
    • Be able to log on to the computer where you installed the management server.
    • Have read access to the Primary server location specified in the Updating policy. See About update server locations and other topics in section Configuring update server locations.
    Note: If you are using a domain account, you must enter the username in the form domain\user. If the computers are on different domains covered by the same Active Directory schema, use the Enterprise Administrator account in Active Directory instead.

Installation is staggered, so the process may not be complete on all the computers for some time.

The installation of encryption will cause computers to restart automatically within about 30 minutes after installation of the encryption software.

By default, full disk encryption is not enabled after installation. To enable it, configure the full disk encryption policy to your needs and assign it to the computers. For further information, see Configure full disk encryption.

For further information on the start behavior of the computer and first logon after installation and activation of full disk encryption, see the Sophos Disk Encryption 5.61 help or the Enterprise Console quick/advanced startup guides.