Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎01-08-2015 10:55 PM
I'm advised that our hardware people are going to start installing Symantec Endpoint on some computers and enabling full-disk encryption. I assume that I'll be able to detect the presence of the software just like any other properly-installed applications, but I'm hoping to be able to report on the encryption status of at least the boot drive. Does anyone have experience with identifying this information?
Solved! Go to Solution.
Labels:
- Labels:
-
Report Center
1 ACCEPTED SOLUTION
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎01-14-2015 08:40 PM
In case anyone else runs into this, here's what I found so far: the Symantec software creates data under HKLM\Software\Encryption Anywhere\Hard Disk\EAFS\Disk0. Specifically, it creates four comma-separated lists of drives based on their status:
Unfortunately, the EAFS branch is not initially readable, so some permission-adjusting needs to be done. (source)
There's other potentially interesting information to be found under HKLM\Software\Encryption Anywhere\Hard Disk\Client Database.
- StatusEncrypted
- StatusDecrypted
- StatusEncryptionInProgress
- StatusDecryptionInProgress
Unfortunately, the EAFS branch is not initially readable, so some permission-adjusting needs to be done. (source)
There's other potentially interesting information to be found under HKLM\Software\Encryption Anywhere\Hard Disk\Client Database.
1 REPLY 1
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎01-14-2015 08:40 PM
In case anyone else runs into this, here's what I found so far: the Symantec software creates data under HKLM\Software\Encryption Anywhere\Hard Disk\EAFS\Disk0. Specifically, it creates four comma-separated lists of drives based on their status:
Unfortunately, the EAFS branch is not initially readable, so some permission-adjusting needs to be done. (source)
There's other potentially interesting information to be found under HKLM\Software\Encryption Anywhere\Hard Disk\Client Database.
- StatusEncrypted
- StatusDecrypted
- StatusEncryptionInProgress
- StatusDecryptionInProgress
Unfortunately, the EAFS branch is not initially readable, so some permission-adjusting needs to be done. (source)
There's other potentially interesting information to be found under HKLM\Software\Encryption Anywhere\Hard Disk\Client Database.
