Loading...

Knowledge Center


How to migrate from Drive Encryption /Endpoint Encryption for PC to Management of Native Encryption 2.0 or later
Technical Articles ID:   KB82544
Last Modified:  11/7/2017
Rated:


Environment

McAfee Drive Encryption (DE) 7.1.x
McAfee Endpoint Encryption for PC (EEPC) 7.0.x
McAfee Management of Native Encryption (MNE) 3.0, 2.x

For details of MNE supported environments, see KB79375.

Summary

Existing DE/EEPC customers can migrate to MNE 2.0 and later. The process in this article explains how to perform the migration with minimal effort from both the end user and administrator.

MNE for BitLocker is a secondary option for both new and existing DE customers. One of the goals is to provide an option for basic encryption only, especially if you already use BitLocker on all or a some of your endpoints. One application of MNE for a Windows system is to allow ePolicy Orchestrator (ePO) to manage small clusters of systems that you cannot currently manage with DE, such as Windows to Go or Surface Pro devices.

Solution

Prerequisites

  • DE/EEPC: Begin the migration on a system that is already encrypted with DE/EEPC. This can be any supported version.
  • McAfee Agent (MA): Ensure the minimum version of MA is installed. Supported versions of MA for a Windows client include MA 4.8.0 and later. If it is not installed, deploy MA before proceeding.
Procedure

  1. Deploy MNE to the client system with the appropriate policy settings to suit your company environment.

    NOTES:
    • The system can have both DE/EEPC and MNE installed at the same time.
    • MNE will not enable BitLocker on a client system if DE/EEPC is installed.
       
  2. Deactivate and uninstall DE/EEPC. For more information, refer to the appropriate product guide.

    For a full list of product documents, go to the ServicePortal at: http://support.mcafee.com. Click Knowledge Center, and select Product Documentation from the Knowledge Base list.
     
  3. Monitor the progress of the removal of DE/EEPC in the ePO dashboard to confirm that it is uninstalled.

    NOTE: After DE/EEPC is uninstalled, MNE will automatically enable BitLocker at the next policy enforcement.

Rate this document

Languages:

This article is available in the following languages:

English United States
Japanese

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.