The Endpoint Security Agent uses encryption keys to encrypt and decrypt removable data drives when a Microsoft Data Encryption policy is applied to a device. These sections explain encryption key concepts and provide instructions for managing encryption keys.