topic Re: How to reinstall FDE after Recovery? in Endpoint

How to reinstall FDE after Recovery?

carlosfuch — Thu, 31 Oct 2024 14:37:36 GMT

I had a machine with Full Disk Encryption and tried out the Recovery process. The process completed successfully: the disk was fuly decrypted, and Pre-boot authentication was disabled. However, the next steps were somewhat unclear to me. Since the Data Protection policy rule applied to that machine still has FDE enabled, I expected the disk to re-encrypt automatically once the agent updated the policy, but this wasn't the case. I attempted to reinstall the policy with minor adjustments via the Infinity Portal, but FDE remained inactive.

Questions:

What is the correct procedure to reactivate Full Disk Encryption for this machine?
Why didn’t the re-encryption process start automatically as anticipated?

By the way, on the Infinity Portal, the deployment status of the FDE capability is: installed, not activated.

On the other hand, the Full Disk Encryption view shows the following statuses to the FDE blades:

On the machine, this is the FDE view:

Re: How to reinstall FDE after Recovery?

PhoneBoy — Mon, 04 Nov 2024 18:36:37 GMT

Sounds like the Full Disk Encryption service might be stopped on the Endpoint.
See if it's listed under the Windows Services and start the service if it's not running.
Otherwise, I'd check with TAC.

Re: How to reinstall FDE after Recovery?

carlosfuch — Mon, 04 Nov 2024 19:05:04 GMT

I had tried it before. It is listed, but Windows is not able to start it up.

Re: How to reinstall FDE after Recovery?

PhoneBoy — Mon, 04 Nov 2024 22:46:04 GMT

Suggest engaging with TAC here as I'm sure they've seen this situation before.