When set to Enable, if a Self-Encrypting Drive (SED) is detected, BitLocker will not protect the endpoint. When set to Do Not Allow, this option will be greyed out, and is not a selectable option either within the Dell Encryption UI, nor in Windows settings.ĭisable BitLocker on Self-Encrypting Drives When multiple items are set to 'Allow', the end-user will be presented a selection box to make their choice.

When set to Allow, enables this setting as a selectable option to the end-user. No prompt will be given to the end-user on an endpoint. When set to Required, this is the only option for end users. When Enabled, ensures that older TPM models are supported, and enables the ability to escrow BitLocker keys to USB on devices without TPMs. This property enables the next 5 polices and enables for defined protectors to be enabled on managed endpoints.Īllow BitLocker Encryption Without a Compatible TPM Require Additional Authentication at System Startup Setting this to Turn Off Encryption forces a decryption of the volume and cannot be modified by local administrators Setting this to Turn On Encryption forces encryption of the volume and cannot be modified by local administrators. When set to Do Not Manage, the local administrators of devices can modify BitLocker as desired. When enabled, during encryption the device will not be allowed to go into any sleep states. This plugin activates the TPM if it is 'On' but not properly activated. This plugin is required for all Dell BitLocker manager policies to properly apply.Įnables/Disables the TPM Management Plugin. Enables/Disables the BitLocker Manager Plugin.

Why is the encrypt option greyed out