nuborgh Super Contributor.
Super Contributor.
2366 views

FDE Policy assigned but Status Unknown

Hello everyone,

we use zenworks 2017 update 3 clients windows 10(1803) secure boot disabled.
I cant get FDE to work. Did see it work once. but after a new image it will not encrypt anymore.
Try to remove clients for the policy and created a new one but still the status is UNKNOWN .

What can i do??

greetings Wilfred
0 Likes
18 Replies
Micro Focus Expert
Micro Focus Expert

Re: FDE Policy assigned but Status Unknown

#1 - Update 3 Supports Secure boot, so that should not be an issue.
#2 - Make sure "Secure Boot Manager" is set as the default....See ->https://support.microfocus.com/kb/doc.php?id=7022842
Normally the FDE Install will do this by default, but some UEFI Systems have security settings preventing the default from being changed from the OS Side....



nuborgh;2488449 wrote:
Hello everyone,

we use zenworks 2017 update 3 clients windows 10(1803) secure boot disabled.
I cant get FDE to work. Did see it work once. but after a new image it will not encrypt anymore.
Try to remove clients for the policy and created a new one but still the status is UNKNOWN .

What can i do??

greetings Wilfred
0 Likes
nuborgh Super Contributor.
Super Contributor.

Re: FDE Policy assigned but Status Unknown

CRAIGDWILSON;2488536 wrote:
#1 - Update 3 Supports Secure boot, so that should not be an issue.
#2 - Make sure "Secure Boot Manager" is set as the default....See ->https://support.microfocus.com/kb/doc.php?id=7022842
Normally the FDE Install will do this by default, but some UEFI Systems have security settings preventing the default from being changed from the OS Side....


#2 secure boot manager is bootprio 1
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: FDE Policy assigned but Status Unknown

Maybe make sure it is not listed twice....

See - https://forums.novell.com/showthread.php/509667-Unable-to-apply-policy-to-device-that-has-been-imaged

Technically this is not a known issue, but I did recommend an SR for this customer but I'm not aware of an SR being started for the issue nor have I ever seen it reported elsewhere...
Not sure if you are seeing a double up....but you did reference imaging....
0 Likes
nuborgh Super Contributor.
Super Contributor.

Re: FDE Policy assigned but Status Unknown

CRAIGDWILSON;2489206 wrote:
Maybe make sure it is not listed twice....

See - https://forums.novell.com/showthread.php/509667-Unable-to-apply-policy-to-device-that-has-been-imaged

Technically this is not a known issue, but I did recommend an SR for this customer but I'm not aware of an SR being started for the issue nor have I ever seen it reported elsewhere...
Not sure if you are seeing a double up....but you did reference imaging....


still not working..

did you hear anything about that SR?
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: FDE Policy assigned but Status Unknown

As far as I know an SR was never created.
Definitely there was never a Defect Created with development.
I have also never heard this reported by any other customer.

About all I can do is suggest an SR.
FDE in ZENworks 2017 Update 3 has been so rock solid, there was not a single issue reported regarding core Encryption Functionality that needed to be fixed for Update 4.
A couple of minor details surrounding PreBoot Authentication....but that was just mostly some minor details to fix some GUI issues on certain hardware devices.



nuborgh;2492245 wrote:
still not working..

did you hear anything about that SR?
0 Likes
nuborgh Super Contributor.
Super Contributor.

Re: FDE Policy assigned but Status Unknown

CRAIGDWILSON;2492281 wrote:
As far as I know an SR was never created.
Definitely there was never a Defect Created with development.
I have also never heard this reported by any other customer.

About all I can do is suggest an SR.
FDE in ZENworks 2017 Update 3 has been so rock solid, there was not a single issue reported regarding core Encryption Functionality that needed to be fixed for Update 4.
A couple of minor details surrounding PreBoot Authentication....but that was just mostly some minor details to fix some GUI issues on certain hardware devices.


I had a remote session with ron of micro fos BeNeLux . he did see the problem but no solution at the moment.

hope he get back to me soon.
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: FDE Policy assigned but Status Unknown

Did you create an Actual Service Request?
I do not believe any of the official ZCM/FDE Support Engineers in Europe are named Ron.
I do not dispute that you may have had a Ron, but without an SR....which are free and unlimited to everyone except Academic Licenses, you are missing out on the folks best positioned to resolve your issue.
If you post your Service Request #, I can look at the status.
0 Likes
nuborgh Super Contributor.
Super Contributor.

Re: FDE Policy assigned but Status Unknown

still no solution.

Ron van Herk https://ohmag.net/?paged=2&author=1159

gr Wilfred
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: FDE Policy assigned but Status Unknown

But keep in mind....Ron works for Sales.
He is not a ZENworks Support Engineer.

You need to Open a Service Request with the Technical Support Department.
Ron is technical, but you need to go support.novell.com and the Customer Care center to open an SR.

There is a "Chat" feature here as well....https://www.novell.com/support/
Where I'm sure they can walk you through the process.
0 Likes
nuborgh Super Contributor.
Super Contributor.

Re: FDE Policy assigned but Status Unknown

solved in zenworks 2017 update 4

CRAIGDWILSON;2493527 wrote:
But keep in mind....Ron works for Sales.
He is not a ZENworks Support Engineer.

You need to Open a Service Request with the Technical Support Department.
Ron is technical, but you need to go support.novell.com and the Customer Care center to open an SR.

There is a "Chat" feature here as well....https://www.novell.com/support/
Where I'm sure they can walk you through the process.
0 Likes
nuborgh Super Contributor.
Super Contributor.

Re: FDE Policy assigned but Status Unknown

but now the problem is back after image...
0 Likes
Micro Focus Expert
Micro Focus Expert

Re: FDE Policy assigned but Status Unknown

I presume the Agent is Pre-installed on the Image.
My guess is your imaging process is capturing encrpytion details from the prior image.

While I've never seen this before so this is a random thought...
Starting from a Clean OS Install that never had the ZCM Agent installed.....
Install the agent with the "-b fde" switch so the device does not install FDE by default and make sure the device initially registers to a folder that does not have FDE set to install.

Then when you image a device, it will be sure to not have any left over FDE stuff.
Then when you image, the device will install the FDE spoke after it is imaged.

But almost certainly it is about something with your image.

No other customer has reported this issue......

Service Request would help far more than sales.........
0 Likes
nuborgh Super Contributor.
Super Contributor.

Re: FDE Policy assigned but Status Unknown

CRAIGDWILSON;2495037 wrote:
I presume the Agent is Pre-installed on the Image.
My guess is your imaging process is capturing encrpytion details from the prior image.

While I've never seen this before so this is a random thought...
Starting from a Clean OS Install that never had the ZCM Agent installed.....
Install the agent with the "-b fde" switch so the device does not install FDE by default and make sure the device initially registers to a folder that does not have FDE set to install.

Then when you image a device, it will be sure to not have any left over FDE stuff.
Then when you image, the device will install the FDE spoke after it is imaged.

But almost certainly it is about something with your image.

No other customer has reported this issue......

Service Request would help far more than sales.........


We create a clean Sysprep with the client install after the image is placed .
But i can try making a sysprep with those switches for the install of zenworks.

Thanks for the message.

gr Wilfred
0 Likes
nuborgh Super Contributor.
Super Contributor.

Re: FDE Policy assigned but Status Unknown

nuborgh;2495080 wrote:
We create a clean Sysprep with the client install after the image is placed .
But i can try making a sysprep with those switches for the install of zenworks.

Thanks for the message.

gr Wilfred


i did try this but the problem is still there.

gr Wilfred
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.