The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Product Settings Policy — Encryption tab

Prev Next

The Encryption tab under the Product Settings Policy allows you to select the required encryption type and set the encryption priority.

Option

Definition

Encrypt

Allows you to select the required encryption type and to set the encryption priority.

Encryption type

The type of encryption:

  • None — Does not encrypt any disk.

  • All disks — Encrypts all disks in a system.

  • Boot disk only — Encrypts only the boot disk.

  • Selected partitions — Allows you to select the required partitions of the client system and select them to be encrypted. You can select the required partitions by specifying the Windows drive letters/volume names. Partition level encryption is not applicable to client systems using OPAL encryption.

    Note

    Do not assign a drive letter to the Windows 7 hidden system partition on your client system. Doing so prevents activation of the Drive Encryption software on the client system.

    This table also lists the available encryption providers (PC Software and PC Opal) available. You can change and set the encryption priority by moving the encryption provider rows up and down, as appropriate.

    By default, software encryption is used on both Opal and non-Opal systems in this version of Drive Encryption. To ensure that Opal technology is chosen in preference to software encryption, we recommend that you always set Opal as the default encryption provider, by moving it to the top of the list on the Encryption Providers page. This ensures that Opal locking will be used on Opal drives.

    Note

    Make sure that you select the required encryption type, as appropriate. Policy enforcement might fail on client systems if you select an unsupported encryption type.

  • All disks except boot disk — Encrypts all disks except the boot disk (not recommended)

The Encryption type options None, All disks except boot disk, and Selected partitions are not applicable to self-encrypting drives in Opal mode.

Move To Top

Allows the topmost encryption provider to take priority.

Duplicate

Duplicates or copies the policy with a different name and this can be assigned to a different user.

Save

Saves the product settings policy of Drive Encryption.

Cancel

Exits the current page.