Device Guard is an optional module available for Endpoint Security Server 5.3.0 or later. It is installed using Endpoint Security Web UI by downloading the module installer package (.cms file) from the FireEye Market and then uploading the module .cms file to your Endpoint Security Web UI. The module is disabled by default. Refer to Enabling the Device Guard Module for steps to enable the server module.
After the module is installed successfully, it is displayed on the Modules menu. The configuration properties for the module appear on the Endpoint Module Administration Module Configuration page.