Strong encryption and security
-Consistent protection spans enterprise desktops and servers.
-Transparent encryption covers all data: user files, swap files, system files, hidden files and more.
Simplified management and deployments
-Options for silent installation deliver full disk encryption deployments that cause little user disruption.
-A single, Web-based management console gives you automatic, centralized policy enforcement.
-Easy passphrase and machine recovery provide local self-recovery, one-time-use tokens and other recovery options.
-Support for Windows single sign-on means fewer passwords to remember.
|Supported Operating Systems|
-Microsoft Windows 10 Anniversary Update Enterprise (32-bit and 64-bit editions)
-Microsoft Windows 10 Anniversary Update Pro (32-bit and 64-bit editions)
-Windows 10 November 2015 Update (32-bit and 64-bit editions)
-Windows 10 Enterprise (32-bit and 64-bit editions)
-Windows 10 Pro (32-bit and 64-bit editions)
-Windows 8.1 November 2014 Update (32-bit and 64-bit editions)
-Windows 8.1 Update 2, August 2014 (32-bit and 64-bit editions)
-Windows 8.1 Update 1, May 2014 (32-bit and 64-bit editions)
-Windows 8.1 Enterprise (32-bit and 64-bit editions)
-Windows 8.1 Pro (32-bit and 64-bit editions)
-Windows 8 Enterprise (32-bit and 64-bit editions)
-Windows 8 Pro (32-bit and 64-bit editions)
-Windows 7 Enterprise (32-bit and 64-bit editions, including Service Pack 1)
-Windows 7 Pro (32-bit and 64-bit editions, including Service Pack 1)
Note: The above operating systems are supported only when all of the latest hot fixes and security patches from Microsoft have been applied.
-Desktop or laptop disks (partitions in the case of Windows, or the entire disk for Windows and Mac OS X)
-External disks, excluding music devices and digital cameras
-USB flash disks
-Software RAID disks
-Diskettes and CD-RW/DVD-RWs
Mac OS X
-Disks formatted using the APM partition scheme
-Any type of server hardware, including RAID disk drives and software RAID drives
-Diskettes and CD-RW/DVD-RWs
exFAT formatted disks
-Any configuration where the system partition is not on the same disk as boot partition
-Windows Server 2012 R2 64-bit Edition with internal RAID 1 and RAID 5
-Windows Server 2012 64-bit Edition with internal RAID 1 and RAID 5
-Windows Server 2008 R2 64-bit Edition with internal RAID 1 and RAID 5
Note: Dynamic disks and software RAID are not supported. The above operating systems are supported only when all of the latest hot fixes and security patches from Microsoft have been applied.
-OpenPGP RFC 4880 keys
|Mac OS X|
-Apple Mac OS X 10.9.5, 10.10.x, 10.11.4
|Symmetric Key Algorithms
-AES 256-bit keys
-AES 128-bit keys (enabled on Symantec Encryption Management Server)
-Ubuntu 12.04 LTS, 12.04.5 LTS, 14.04 LTS, 14.04.4 LTS; (32-bit and 64-bit versions)
-Red Hat Enterprise Linux/CentOS 5.10, 5.11, 6.6, 6.7, 7.0, 7.2 (BIOS only, 32-bit and 64-bit versions)
Note: Symantec Drive Encryption for Linux is command line only.
|Centralized Management Requirements
Symantec Drive Encryption optionally may be centrally managed by Symantec Encryption Management Server (powered by PGP™ Technology), which requires a dedicated hardware server. For supported hardware and other information, please refer to the Symantec Encryption Management Server technical specifications.
|Supported Keyboard Languages|
Symantec Drive Encryption for Windows
-English (United States, United Kingdom, US-International)
-Belgian (Belgium; Comma), Belgian (Belgium; Period)
-Bosnian (Bosnia), Bosnian (Bosnia; Cyrillic)
-Bulgarian (Bulgaria), Bulgarian (Bulgaria; Latin), Bulgarian (Bulgaria; Typewriter)
-Canadian Multilingual Standard (Canada)
-Chinese Simplified (China, Singapore), Chinese Traditional (Hong Kong, Taiwan)
-Czech (Czech Republic; QWERTY)
-Dutch (The Netherlands)
-French (Belgium), French (Canada), French (France), French (Switzerland)
-German (Germany/Austria), German (IBM), German (Switzerland)
-Hungarian (Hungary), Hungarian (Hungary; 101 keys)
-Italian (Italy), Italian (Italy; 142 keys)
-Polish (Poland; Programmers), Polish (Poland; 214 keyboard)
-Portuguese (Brazil; ABNT keyboards), Portuguese (Brazil; ABNT2 keyboards)
-Russian (Russia; Cyrillic)
-Serbian (Serbia and Montenegro; Cyrillic), Serbian (Serbia and Montenegro; Latin)
-Spanish (Spain), Spanish (Latin America), Spanish Variation
-Turkish (Turkey; F), Turkish (Turkey; Q)
|Compatible Smart Cards or Tokens for Symantec Drive Encryption Authentication (Windows Only)
Symantec Drive Encryption is compatible with the following smart cards for pre-boot authentication:
-ActiveIdentity ActivClientCAC cards, 2005 model
-Aladdin eToken PRO 64K, 2048-bit RSA capable
-Aladdin eToken PRO USB Key 32K, 2048-bit RSA capable
-Aladdin eToken PRO without 2048-bit capability (older smart cards)
-Aladdin eToken PRO Java 72K
-Aladdin eToken NG-OTP 32K (Note: Other Aladdin eTokens, such as tokens with flash, should work provided they are APDU compatible with the compatible tokens.
-OEM versions of Aladdin eTokens, such as those issued by VeriSign, should work provided they are APDU compatible with the compatible tokens.)
-Athena ASEKey Crypto USB Token
-Athena ASECard Crypto Smart Card (Note: The Athena tokens are compatible only for credential storage.)
-Axalto Cyberflex Access 32K V2
-Charismathics CryptoIdentity plug 'n' crypt Smart Card-only stick
-EMC RSA SecurID SID800 Token (v1 and 2) (Note: This token is compatible only for key storage. SecurID is not compatible.)
-EMC RSA Smart Card 5200
-Marx CrypToken USB token
-Rainbow iKey 3000
-S-Trust StarCOS smart card (Note: S-Trust SECCOS cards are not compatible.)
-SafeNet iKey 2032 USB token
-SafeNet 330 smart card
-T-Systems Telesec NetKey 3.0 smart card
-T-Systems TCOS 3.0 IEI smart card
-Personal Identity Verification (PIV) cards:
- Oberthur ID-One Cosmo V5.2D PIV cards using ActivClient version 6.1 client software.
- Giesecke and Devrient Sm@rtCafe Expert 3.2 PIV cards using ActivClient version 6.1 client software.
Symantec Drive Encryption for Windows also recognizes and works with smart cards from other vendors if the vendor includes a standards-based PKCS-11 library in its software drivers.
|Symantec Drive Encryption for Mac OS X|
-German (Germany); German (Switzerland)
-French (France); French (Switzerland)
-Spanish (Latin America), Spanish (Spain; ISO)
|Two-Factor Authentication (Windows Only)
Generic Smart Card Readers
Most CCID smart card readers are compatible. The following readers have been tested by Symantec Corporation:
-OMNIKEY CardMan 3121 USB for desktop systems (076b:3021)
-OMNIKEY CardMan 6121 USB for mobile systems (076b:6622)
-ActiveIdentity USB 2.0 reader (09c3:0008)
-SCM Microsystem Smart Card Reader model SCR3311
-CyberJack smart card readers - Reiner SCT CyberJack pinpad (0c4b:0100)
-ASE smart card readers - Athena ASEDrive IIIe USB reader (0dc3:0802)
-Embedded smart card readers - Dell D430, D630 and D830
-Embedded smart card readers - Dell E6410 and E6510 (Broadcom)