Update 2a

I updated to zcm 2017 2a last month and the agent deployed to all devices with no errors. Some of my devices are now restarting, running a chkdsk and re-encrypting the hard drive. The devices in question have a new emergency fde password in the zcc . Is this normal and if so how can I control the timing of the encryption?