You can increase data security by regularly generating a new encryption key from the Microsoft Data Encryption policy. The new key becomes the active encryption key, which means that all newly encrypted removable data drives use the key .
In ZENworks Control Center, navigate to Policies and click the policy link for the Microsoft Data Encryption policy that you are using in your zone, and then select the Details tab.
Under Common Tasks (in the left navigation pane) click Encryption: Generate Keys.
Click OK to confirm creation of the new key.
The next time a device refreshes its information from the ZENworks Server, the Endpoint Security Agent begins using the new key to encrypt new drives used on the device thereafter.