HP EliteBook 840 G6 and HP ProBook 640 G5 will not boot properly after installing SEE 11 with DMA Protection enabled
search cancel

HP EliteBook 840 G6 and HP ProBook 640 G5 will not boot properly after installing SEE 11 with DMA Protection enabled

book

Article ID: 176406

calendar_today

Updated On:

Products

Endpoint Encryption

Issue/Introduction

Some new UEFI systems are shipping with a new BIOS setting called DMA Protection, which is a security feature to protect against Physical DMA attacks.  When DMA Protection is enabled in the BIOS, this may cause some systems to become unbootable.  After entering the SEE credentials at preboot, the system will hang at a black screen and will not boot.

DMA Protection was introduced in Windows 10 1803 and should not be available for versions prior to this.  If a system is installed with Windows 10 1709 or older, and DMA Protection is enabled, even without SEE 11 installed, the system may not boot up properly, therefore, it is recommended DMA Protection be disabled for systems on Win10 1709 or older.

Resolution

Enter the BIOS (Spam the F10 key), select Advanced --> System Options, disable DMA Protection and save:

This issue is resolved in Symantec Endpoint Encryption 11.3.1 and above.   
If you continue to have issues with DMA Protection, please reach out to Symantec Encryption Support for further Guidance. 
EPG-18799

Additional Information

266204 - Some Dell Systems not able to boot up after installing Symantec Encryption Desktop or Symantec Endpoint Encryption