Creating a de-initialization policy
Creating a de-initialization policy
This section details how to create a de-initialization policy for the PBA component only.
You need to have knowledge about the target computer for deployment. Details such as number of partitions, drive letters, is it already encrypted etc… are necessary for the successful deployment of Matrix42 Full Disk Encryption. Once the policy is created, deploy it, for details see Deploying PBA policies.
Follow the step below to create a new policy in PBA Policy Builder:
- Open the Control Center.
- Double-click the Policy Builder icon.
- Select Pre-Boot Authentication policy builder.
- The PBA Policy Builder Welcome dialog appears.
- Click Next to continue.
- The Policy selection dialog appears.
- Select the Create a new policy radio button.
- Click Next to continue.
- The Policy type dialog appears.
- Select Create a deinitialization policy. Click Next to continue.
- The Deinitialization Options dialog appears.
This dialog allows you to define the following options:
| Option | Details |
|---|---|
|
Deinitialize Pre-Boot Authentication |
Deactivate Matrix42 Full Disk Encryption PBA only. Matrix42 Full Disk Encryption can be re-activated remotely via a second policy, or manually via the Control Center. |
|
Remove Pre-Boot Authentication |
Remove Matrix42 Full Disk Encryption PBA completely. |
- Once you have made your selection click Next.
Message options
- The Message options dialog appears.
The messages below are shown only on computers with Windows versions below Windows 10.
| Option | This option determines whether... |
|---|---|
|
Show status dialogs
|
… status dialogs should be displayed on the target computer during policy deployment. |
|
Show warning messages
|
… warning messages should be displayed on the target computer during policy deployment. If you do not select this option, warning messages are suppressed. |
|
Show error messages
|
… error messages should be displayed on the target computer during policy deployment. If you do not select this option, error messages are suppressed |
|
Show success messages
|
… success messages should be displayed on the target computer that relate to individual policy tasks during deployment. |
|
Show other messages
|
… information messages should be displayed on the target computer during and after policy deployment. If you do not select this option, information messages are suppressed. |
- Make your selection and click Next to continue
Administration Password
- The Administration password (target computer) dialog appears:
- Enter and confirm the Matrix42 Full Disk Encryption administration password, which you already set on the target computer.
- Click Next to continue.
Policy Location
- The Policy Location dialog appears.
The following options are available:
| Option | Details |
|---|---|
|
Policy file Path
|
Enter the path for the policy in this field by clicking ‘…’ and selecting a location and filename for the file in the file browser. |
|
Create an unencrypted copy of the policy
|
Check this option to create an unencrypted copy of the policy (recommended for reconfiguration). If you want to reconfigure a computer that has already been configured using a policy, then check this option - the Policy Builder can only open an unencrypted policy to edit the settings. |
|
Plain copy of policy
|
Enter the path for the plain copy of the policy in this field by clicking ‘…’ and selecting a location and filename for the file in the file browser. |
- Enter the paths for your policy and click Finish to complete the procedure.