McAfee ENDPOINT ENCRYPTION ENTERPRISE - BEST PRACTICES GUIDE, Manual

Page: 24 / 26

24
General Advice
Default Product settings (for maximum compatibility).
Installing the Endpoint Encryption Manager (EEM) using the default settings will usually ensure maximum
compatibility.
Endpoint Encryption Machines
For Endpoint Encryption Machine Groups and therefore individual Machines, the default settings in
“Properties” would usually provide the most compatibility.
Some of the extra options that may help in certain situations (usually as advised by McAfee Support or
Professional Services) can be used but could cause extra issues if used globally, or without careful thought.
Below are some settings that are not enabled by default. These could cause potential issues if not used
correctly.
GENERAL:
• Enable Boot disk compatibility
Some machines have BIOS code which mounts USB disks as physical drives. This can cause Windows
to hang after EEPC has finished authorization. This should remain at the default setting, disabled (not
selected), unless you have a specific issue with USB drives or have been advised by McAfee Support.
• Reject Suspend/Hibernate Requests ‐ This option stops the machine from entering hibernation mode.
Note: this option is not supported in Vista.
With later versions of EEPC v5.x this should normally be left disabled, to allow normal operation of
hibernation which is fully encrypted and protected by EEPC.
• Always enable pre ‐ boot USB support
This should remain at the default setting, disabled (not selected), unless you have issues with USB
devices with EEPC at preboot, or, have been advised to try this option. It should not normally be
enabled and also not used if the BIOS’s USB legacy support is also enabled.
FILES:
Some compatibility options are available as special optional file groups that could be assigned to machines
to support extra features, hardware, languages, or to work around 3rd party issues.
With a standard install of EEM and EEPC for example, using the defaults, the file groups commonly
assigned to the default Machine Group are:
EEPC5x Theme213: Endpoint Encryption for PC McAfee Theme EEPC5x: Endpoint Encryption 5.2.2 Client
Files (example shown from v5.2.2, names may vary).
These would normally work well for most machines – usually together with one of the language groups
assigned, for example “EEPC52 LANG: English United Kingdom/USA (Preboot, keyboard, Windows)”. Many