This article documents the changes and fixes for Symantec Endpoint Encryption Full Disk 7.0.2
Management Support of Non-Domain Endpoints
|Issues preventing the full support of the Acer Aspire 5515 have been remediated.|
|Issues preventing the full support of the following Dell models have been remediated: Dimension 3000, Latitude E6400, OptiPlex 760, and Precision M6400.|
|Issues preventing the full support of the Fujitsu LifeBook T5010 have been remediated.|
|Issues preventing the full support of the following Hewlett Packard (HP) models have been remediated: Compaq dc7900, Compaq nc6320, Compaq 2710p, Compaq 6535b, Compaq 6710b, Compaq 6735s, Compaq 6715b, Compaq 6730b, EliteBook 2530p, EliteBook 6930p, and EliteBook 8730w.|
|Issues preventing the full support of the following Panasonic Toughbook models have been remediated: CF-W8 and CF-30K.|
|Issues preventing the full support of the following Toshiba models have been remediated: Portege M400 and Satellite A215-S5837.|
|Keyboards or mice connected directly to the right-hand USB port of an HP Compaq 6320 can now be used in Pre-Windows.|
|The removal and reinsertion of an SCM SCR 201 PCMCIA card reader before or at the Startup screen no longer causes the system to hang.|
|Users will no longer be able to include the following unsupported characters from Spanish keyboards at the Pre-Windows Password Change dialog: º ¡ ¿ ¬ ª ^ € ¨|
|Third Party Tool||Description||Workaround|
|Client machines will fail to recover after|
going into screensaver mode from
|Perform a hard reboot and disable BIOS power|
management. Windows power management
should be used instead.
|Roxio 6.2||The Framework client package will fail|
to install due to a missing drive letter in
the primary partition.
|Ensure that the following Registry key has the|
|Symantec Endpoint |
|Following the installation of SEE Full|
Disk on the Client Computer, a Network
Threat Protection message may be
displayed, alerting the end user to a
change in the EAFRCliADSI
|Open Symantec Endpoint Protection and click|
Options in the Network Threat Protection area.
Select Configure Firewall Rules from the popup
menu. Highlight Block IPv6 over IPv4 and
click Edit. Select the Allow this traffic option
button on the General tab. Open the Ports and
Protocols tab. Select All IP Protocols from the
Protocol drop-down list box.
|RSA SecurID® 800||If a second certificate is added to the|
token and the first certificate is deleted,
the user will be unable to register with
|Remove all certificates from the token and add|
the certificate again.
|If an encrypted hard disk is|
defragmented, the Full Disk panels of
the User and Administrator Client
Consoles will no longer be displayed.
|Defragment with this tool before encrypting the|
|If an account that already exists on the database is specified in the|
Database Configuration page of the SEE Management Server
InstallShield wizard, the installation will fail with a SQL script error.
|Do not enter the credentials of a|
pre-existing account. Type the
credentials of an account that does not
|When uninstalling the SEE Full Disk client, the following error may be|
displayed, “Error 25027. Stop EAFRCliManager service –failed.”
|Manually stop the service and try again.|
|If power is lost during an upgrade of the client machine, a blue screen|
may occur and the machine may loop continuously in an effort to boot
|Run Recover /d. If Recover /d fails, try|
Recover /b. If the Recover Program
completes successfully, back up
important files, then reinstall SEE Full
Disk. If this fails, you will need to
reinstall Windows or reimage the
|If password authentication is selected during the installation of SEE|
Framework Manager console, but token authentication is specified by
policy, users will be unable to register.
|On certain machines, such as the Compaq nc6320, Optiplex GX280,|
Lifebook T5010, EliteBook 8730w, and ThinkPad T400, errors ranging
from inconvenient to fatal may occur if the machine goes into
hibernation following the registration of the first user and before
|Disable hibernation or ensure that the|
machine reboots following registration of
the first user.
|If the user or Client Administrator removes their card from their|
PCMCIA reader after entering their PIN and before the validation
process has completed, they will receive a fatal error.
|Leave the card in for the duration of the|
|SEE Full Disk may not recognize PCMCIA card readers on certain|
Hewlett Packard machines, such as HP Compaq 6710b and HP
|In Pre-Windows, SEE Full Disk will receive double input for each key|
pressed on external keyboards connected to the left-hand USB slots of
HP Compaq nc6120 computers.
|Use the right-hand USB slot instead.|
|Users may be unable to combine the ^ (Circumflex), ¨ (Diaeresis), `|
(Grave) and ´ (Acute) dead keys with l (0131), I (0049), Shift+i (0069)
or Shift+I (0130) from the Turkish Q keyboard.
|The Turkish Q character İ; (0130) may display as I in pre-Windows.|
|Users will be unable to enter the following characters from Canadian|
French keyboards in Pre-Windows: á ç
|Users will be unable to enter the following character from German|
keyboards in Pre-Windows: μ
|Users will be unable to toggle keyboards after launching logon|
|If users need to toggle keyboards, they|
should do so before launching logon
|Validation is not performed on the client-side SSL certificates selected|
when creating client installation packages.
|Ensure that the certificate file is in the|
CER format and valid for IIS
|Highlighted computers and/or groups may incorrectly display,|
“Currently no policy has been assigned to the group.”
|Review policy precedence rules in Policy|
Administrator Guide to determine the
policy in effect.
|The name of the Last Logon Time column of the Associated Users|
dialog refers to the last time/date that the user or Client Administrator
logged on to the User or Administrator Client Console.
|After turning off synchronization services using the Configuration|
Editor, the SEE Native Policy Manager may show that a policy has
been applied to a Novell or Active Directory object that no longer
|Deploying an Active Directory policy that contains a change to the|
Client Administrator settings from a 6.1.0 or later Manager to 6.0.0 or
earlier clients will result in a failure of the new Client Administrator
policy to be applied, a deletion of all existing Client Administrator
policies, and a return to the Client Administrators specified in the
original installation settings.
|When deploying an Active Directory|
policy from a 6.0.0 or earlier Manager,
add the following WMI filter:
Select * FROM Win32_Product
WHERE (name="Symantec Endpoint
Encryption Framework Client") AND
(version <= "6.0.0")
When deploying an Active Directory
policy from a 6.1.0 or later Manager, add
the following WMI filter:
Select * FROM Win32_Product
WHERE name = “Symantec Endpoint
Encryption Framework Client” AND
version > "6.1.0"
|Under rare circumstances, the Novell SSO panel may display absent|
any check boxes.
|Close the User Client Console and|
|If a user presses CRTL+ALT+DEL in Windows Vista, clicks Change|
Password, provides the incorrect old password causing an error or is
prevented from changing their password due to Windows policies, and
then cancels out, that user will be unregistered from SEE.
Obtain and apply the hotfix
|Password synchronization problems in Windows Vista could occur if|
users specify blank passwords.
|Set the Windows policy to prevent users|
from specifying blank passwords.
|JAWS does not always announce all of the information displayed|
within the Registration wizard and User Client consoles.
|Users should follow these steps:|
1. Press INSERT+F9.
2. Select the frame that is of interest
from the resultant Frames List
3. Click OK.
4. Press P.
If this doesn’t work, restart JAWS and
try the steps again.