The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Assign a policy to a system

Prev Next

You can assign the required policy in the Policy Catalog to any system or system group. Assignment allows you to define policy settings once for a specific need, then apply the policy to multiple locations.

Before you begin

You must have administrator rights to perform this task.

When you assign a new policy to a particular group, all child groups and systems that are set to inherit the policy from this assignment point are assigned that policy.



Task
  1. Click Menu → Systems → System Tree, then select a group of systems from the System Tree. The systems within this group (but not its subgroups) appear in the details pane.

  2. Select the target system, then click Actions → Agent → Modify Policies on a Single System. The Policy Assignment page for that system appears.

  3. From the Product drop-down list, select Drive Encryption 8.x. The policy categories under Drive Encryption are listed with the system’s assigned policy.

  4. Select the Product Settings policy category, then click Edit Assignments.

  5. If the policy is inherited, select Break inheritance and assign the policy and settings below next to Inherit from.

  6. From the Assigned policy drop-down list, select the Product Setting policy.

    From this location, you can edit the selected policy or create a new policy.

  7. Select whether to lock policy inheritance so that any systems that inherit this policy can't have another one assigned in its place.

  8. When modifying the default policy or creating the new policy, select any disk encryption option except None, by navigating to Encryption (tab) | Encrypt. The default option None does not initiate the encryption, but does enable the Pre-Boot Authentication.

    Note

    Make sure that you select the correct encryption provider and set the priority, as appropriate. For systems with Opal drives, only the All disks and Boot disk only encryption options are supported. Also, for systems with Opal TCG complaint drives, set the highest priority to use Opal in the organization.

  9. Click Save.