HP EliteBook 840 G6 and HP ProBook 640 G5 will not boot properly after installing SEE 11 with DMA Protection enabled

Products

• Endpoint Encryption

Issue/Introduction

Some new UEFI systems are shipping with a new BIOS setting called DMA Protection, which is a security feature to protect against Physical DMA attacks.  When DMA Protection is enabled in the BIOS, this may cause some systems to become unbootable.  After entering the SEE credentials at preboot, the system will hang at a black screen and will not boot.

DMA Protection was introduced in Windows 10 1803 and should not be available for versions prior to this.  If a system is installed with Windows 10 1709 or older, and DMA Protection is enabled, even without SEE 11 installed, the system may not boot up properly, therefore, it is recommended DMA Protection be disabled for systems on Win10 1709 or older.

Resolution

Enter the BIOS (Spam the F10 key), select Advanced --> System Options, disable DMA Protection and save.:

Symantec Enterprise Division Development is currently looking into this issue.

To be informed of future updates, subscribe to this article and you will be notified of future updates.  If you would like to have Symantec Enterprise Division track it with you personally, please log a support case.