Software Update: Symantec Endpoint Encryption 11.0.1 MP1

Symantec has in the past acquired two different companies that developed encryption software, namely GuardianEdge and PGP. The software from these two acquisitions has long been released as two different encryption product lines by Symantec, the GuardianEdge line was renamed to Endpoint Encryption, and the PGP line was renamed to Encryption Desktop along with Encryption Management Server. To an outsider, it’s confusing that one company released two different encryption products that competed and couldn’t work together. There is with the release of Endpoint Encryption 11 largely came to an end in 2014. Since there is no easy way to upgrade from SED and SEMS to SEE, maintenance packs are still being released for the old PGP line. However, the development of new features is only focused on the merged Endpoint Encryption line. The development team recently released the first maintenance pack of version 11.0.1 with the following list of changes:

What’s new in Symantec Endpoint Encryption 11.0.1 MP1

• Added compatibility with Microsoft Windows 10 (32-bit and 64-bit versions). This Maintenance Pack enables users to upgrade from Windows 7, 8, and 8.1 to Windows 10 directly, without first having to decrypt their encrypted drives. For more information about upgrading to Windows 10 without decrypting any drives, see Upgrading Symantec Endpoint Encryption encrypted computers from Microsoft Windows 7, 8, or 8.1 to Windows 10, at
• This Maintenance Pack also adds support for customizing Windows Preinstallation Environment (WinPE) bootable media on Windows 10 systems that have Symantec Endpoint Encryption 11.0.1 MP1 installed. For more information about creating WinPE bootable media on Windows 10 systems, see Recovering Encrypted Disks Using Windows Preinstallation Environment available from
• Added the ability to configure a policy so that either Autologon or client monitor lockout takes precedence on a client computer. See “Configuring Autologon for the client monitor lockout scenario” on page 16.
• Added support for Mac OS X 10.10.3/10.10.4 for Symantec Endpoint Encryption for FileVault.

Resolved Issues in Symantec Endpoint Encryption 11.0.1 MP1

• Resolved an issue with Drive Encryption so that the skipping of unused disk space while encrypting FAT and FAT32 volumes no longer causes data corruption. [3714618]
• Resolved an issue with Drive Encryption so that preboot authentication using token and PIN validation now completes within 10 seconds on the Microsoft Surface Pro series of tablets. [3723564]
• Resolved a compatibility issue with Drive Encryption so that the Windows Pre-installation Environment (WinPE) recovery media no longer fails to initialize mSATA solid-state drives (SSDs) that are connected through 2.5-inch SATA adapters on Dell laptops. [3764176, 3767122, 3767948]
• Resolved an issue so that only the user who originally installed Symantec Endpoint Encryption Management Server can perform an upgrade from version 8.2.1 MP15 or later to version 11.0.1 or later. [3746702]
• Resolved an issue so that Symantec Endpoint Encryption Management Server now permits the use of special characters in the database server name. [3769573]

Additional information about Symantec Endpoint Encryption 11.0.1 MP1

• Decryption through the command line involving logical drives: When decryption is initiated through the command line, encrypted disks that have at least one logical drive might not be decrypted completely. [3831679]
• Single Sign-On feature disablement: When the Single Sign-On feature is disabled, users are still able to log on to Windows without having to enter their Windows credentials, when they turn on the computer after shutdown. [3834569]
• Remote deployment of Management Console on Windows 10: Symantec Endpoint Encryption 11.0.1 MP1 does not support remote deployment of the Management Console on Microsoft Windows 10. [3792973]