New features for Full Disk Encryption in ZENworks 2017 include the following:
Disk encryption policies can now generate an audit event each time a volume is encrypted or decrypted. The events display in Agent Events when added and enabled in Events Configuration > Agent Events.
The Enable encryption lockdown setting was added to the Encryption Settings in the Disk Encryption policy configuration. When selected, this setting prevents drive decryption when a Disk Encryption policy is removed from a device, unless the setting is disabled before the policy is removed.
For more information, see the ZENworks Control Center Help in the Disk Encryption Policy configuration (Step 5).
The Use common password for system-generated ERI files setting was added to the Emergency Recovery Information (ERI) Settings in the Disk Encryption policy configuration. When this option is selected, all system-generated ERI files will use the password that is specified in this setting.
For more information, see the ZENworks Control Center Help in the Disk Encryption Policy configuration (Step 5).