You can create and manage encryption keys from ePO - On-prem on the FRP keys page. These keys can be assigned to users or systems.
Key types
Trellix FRP supports encryption using three types of keys:
Regular keys — Created by ePO - On-prem administrators and used in any policy.
User personal keys — A User personal key is a unique encryption key generated in ePO - On-prem assigned to a user to use on any Trellix FRP system managed by the same ePO - On-prem.
User local keys — Created by the user using the Trellix FRP client software on a client system. The user can use these keys to encrypt or decrypt data. These keys are never backed up in ePO - On-prem.