Enable single sign-on for Trellix FRP smart card and virtual smart card

Click Menu → Policy → Policy Catalog, then select Trellix File and Removable Media Protection from the Products list.

Select Authentication (User-Based Policy).

Click Edit to modify an existing policy or click New Policy to create a new policy.

Select Encryption Key Options.

In the Unlock Triggers section, select Windows logon.

1. Select Enable smart card single sign-on.

2. By default, Trellix FRP works with the built-in Microsoft smart card credentials at Windows logon. If necessary, Trellix FRP can be configured to work with a different credential provider by entering the GUID of the credential provider in Configure custom credential providers to wrap.

   Note

   There are systems in which Drive Encryption or other third-party products are installed and configured to provide single sign-on facilities specific to those products. On such systems, enabling single sign-on for Trellix FRP might not work because the built-in Microsoft smart card credentials can't be used at logon. To have Trellix FRP smart card single sign-on work on these systems, you must identify the custom credential provider installed by the other software to Trellix FRP. Credential providers are identified by a GUID defined in the Windows registry. This allows the single sign-on facility provided by both the third-party software and Trellix FRP to work simultaneously.

Edit the policy settings on each tab as needed.

Click Save.