Trellix Drive Encryption 8.0.0 Release Notes

This release supports:

This major release represents significant development time since our last major version. Trellix Drive Encryption 8.0 brings a renewed vitality to our trusted full disk encryption ePO - On-prem offering and helps prepare for the addition of our ePO - SaaS-managed product. This release includes support for the following enhancements and changes:

Installation and deployment are simplified with a single MSI and ePO - On-prem deployment package — Drive Encryption 7.x MfeEEAgent and MfeEEPC packages are replaced by a single deployment package and MSI, simplifying the deployment process.

Automatically protect against insider threats and tampering with out-of-the-box SysCore Self-Protection capabilities that are installed and enabled by default — By default it will be enabled, ensuring only trusted modules are loaded into Drive Encryption processes, and only authorized modifications can be made to files, folders and registry. An option to disable and uninstall this self-protection feature has been added to the Product settings page under the General tab. It is highly recommended to test this feature in isolation before deployment. To disable this feature during the upgrade, ensure that NOSELFPROTECTION is added to the command-line input for the deployment task.

Enhancement to autoboot that triggers pre-boot authentication when a disk is moved to another system — This option is added to the product settings page under the Log on tab, which prevents autoboot from functioning when a disk is moved between the systems.

The ability to migrate endpoints to ePO - SaaS without un-encrypting and re-encrypting your data — Drive Encryption 8.0.x is 'SaaS-ready' in preparation for the launch of Trellix Drive Encryption - SaaS. This version of Drive Encryption will support management through ePO - SaaS and also allow migration from ePO - On-prem to ePO - SaaS.

Removal of Legacy BIOS support — Drive Encryption 8.0.x is the first release to exclusively support Unified Extensible Firmware Interface (UEFI). Systems still using Legacy BIOS will not be supported, and the Drive Encryption 8.0 installer will reject deployment or upgrades on those systems.

Removal of legacy cold-boot protection and Intel SGX support — Drive Encryption 8.0 has removed cold-boot hardening technologies that depend upon specific hardware that is no longer supported.

Drive Encryption GO (DEGO) — From Drive Encryption 8.0.x onwards, the Drive Encryption GO utility will no longer be provided as part of the product. Customers who are still using Drive Encryption GO can continue to use the latest version available in the Drive Encryption 7.x package.

Removal of support for disks with MBR disk layout — Drive Encryption 8.0.x is the first release that exclusively supports only GUID Partition Table  (GPT) disks. Primary and secondary disks that use the Master Boot Record (MBR) disk layout are not supported. Convert these disks to a GPT layout before upgrading to Drive Encryption 8.x.

For more information about Trellix Drive Encryption, see the Trellix Drive Encryption Product Guide.

This update resolves known issues.