10.1 Standard Hard Disk

The following process occurs after a Disk Encryption policy (encryption only, no pre-boot authentication) is assigned to a device with standard hard disks:

  1. The next time the ZENworks Adaptive Agent refreshes it receives the Disk Encryption policy.

  2. The ZENworks Full Disk Encryption Agent applies the policy to the device.

  3. The device reboots according to the disk encryption reboot setting in the policy. During the reboot, the following occurs:

    • A CheckDisk occurs if the Run Windows check disk with repair option is enabled in the policy. On Windows XP, the operation is performed if needed even if the option is not enabled.

    • A 100 MB ZENworks partition is created. This partition is used for storage of Full Disk Encryption files and the Emergency Recovery Information (ERI) file.

    • The Full Disk Encryption drivers are initialized.

    • The user is prompted to log in to Windows.

  4. The target disk volumes, as specified in the policy, are encrypted.

    Depending on the number of volumes and amount of data to be encrypted, encryption can take some time. If the device is rebooted during the encryption process, the process restarts where it left off prior to the reboot.

    You can view the ZENworks Full Disk Encryption About Box to monitor the encryption process: