Moving from DEE to Jamf Managed Encryption

Moving from Dell Encryption Enterprise (DEE) to Jamf Managed Encryption

Steps Overview:

• Copy Data from External Media
• Execute Remove Dell Encryption Enterprise from Self Service
• Upgrade macOS past Catalina
• Reformat External Media
• Install Endpoint Protector to manage Removable Media

Copy Data from External Media

1. If you do not use removable media, you can skip this step and go straight to the “Remove Dell Encryption Enterprise…” step.
2. If you have data on external media, you will need to transfer it from the Dell encrypted drive to another location, as it will become unusable after this process.  You should also use this opportunity to consider converting to OneDrive! OneDrive is available to all employees, is safer than removable media, is approved for use with most datatypes, and will save you from future headaches associated with removable media use.
3. If you have been using Dell encrypted removable media, do the following:
4. Insert the drive and use the known password to access the data.
5. Select the files you wish to save and copy them to your desktop or other location (e.g. OneDrive).
6. Once the data has been copied, make sure the files are accessible. 
7. Once you have verified the files are accessible, eject the removable media. 
8. Repeat this process for all removable media that you have data on that has been encrypted using Dell.
9. Once you have completed the data copy process proceed on to the next step.

Execute Dell Encryption Enterprise Removal

1. Open Self Service, you can find this using Launchpad.   
2. Click on Execute under Dell Encryption Enterprise Removal Documentation.  
3. This should show you these directions in your web browser. Once you have read them and understand them proceed on. If at this point you require assistance with this process, please contact your IT support personnel.  
4. Once the directions have been read, you may need to refresh the view in Self Service. In the Menu Bar click on View - Refresh Self Service to update the options within Self Service.
5. Click on Run under DEE + AV Script Uninstall. This should start the process to remove AV (if necessary) and Dell Encryption Enterprise.  
6. Click though any steps requested.
7. Once the process completes the system will request a restart. Please restart the system.

Upgrade macOS past Catalina

1. Log back in after the restart, Self Service may be open again, if it is please close it. 
2. At this point you should be able to go to System Settings and click on Software Update. 
3. If your system can update beyond the current OS version it is on, then you should be presented with the option to upgrade your OS. Please do so at this time.  
4. Once the OS has been upgraded, log back into the system.
5. If the system is now at a supported OS level, Jamf should automatically reinstall CrowdStrike if it has been uninstalled during the previous steps.
6. Open Self Service. 
7. Click on Reissue under Reissue FileVault Key.  
8. You will be prompted you for your password. Please provide your credentials to complete this step.
9. This will take over FileVault encryption management for the system and store the recovery key.  

Reformat External Media

1. This step is only required if you have been using Dell encrypted removable media and you’ve already completed the Remove Dell Encryption step.  Otherwise, you can skip this step and go to the “Install Endpoint Protector to manage Removable Media” step.
2. Click on Launchpad.
3. Type Disk in the search bar.
4. Start Disk Utility.
5. Insert the External Media.
6. Click on the Media in the left hand menu when it appears.
7. Click on Erase at the top of the interface.
8. Choose MS-DOS (FAT32) as the Format then click on Erase.
9. Click on the eject button to the right of the drive name in Disk Utility to eject it.
10. Repeat this process for all external media that you wish to use that was previously encrypted using Dell.

Install Endpoint Protector to manage Removable Media

1. Click on Launchpad and Open Self Service.
2. Click on Install under AV + EPP Install macOS 11 and Higher
3. Once Endpoint Protector has finished installing you should see the following icon in the Menu bar. It will be the one with the three dots in the middle.
4. If this does not appear for you after a while, please get with your IT support personnel to troubleshoot this issue.
5. Once Endpoint Protector has been installed you can move your data back to your external media. You should seriously consider using OneDrive instead.
6. To move your data back to your external media do the following.
7. Insert the external media.
8. Upon insert, you should receive a prompt to deploy EasyLock to the drive. This program takes care of encrypting files. Click on Deploy.  
9. Deploying EasyLock may take some time depending on your internet connection. The process is getting the latest client from the server. Once EasyLock has been deployed, you will need to click on the application to finish setting it up.
10. Follow the on screen instructions and click OK.
11. Once the application has been set up, you will be asked to enter the password to access files.
12. Copy your files back onto the drive using the EasyLock application.
13. Files are now safely encrypted on the external removable media.
14. Before removing a drive that has data encrypted using EasyLock be certain to close the EasyLock application and to eject the drive using Finder.
15. To modify the files, you will need to run the EasyLock application, enter the password and then copy the file to your local system. Make your modifications, then use the EasyLock application to copy the file back to your removable media.