McAfee QUICKCLEAN 1.0 Betriebsanweisung

Product GuideManagement of Native Encryption 1.0For use with ePolicy Orchestrator 4.6.6, 5.0.0, 5.0.1 Software

RequirementsMake sure that your client systems meet these requirements before you install and deploy MNE.Table 2-1 System requirements Systems Requir

Deploy McAfee Agent for Mac through SSHYou can deploy McAfee Agent for Mac to client systems through Secure Shell (SSH).Before you beginTo deploy McAf

Check in the MNE software packagesThe software package must be checked in to the master repository so that you can use McAfee ePO todeploy the softwar

10Next to Tags, select the required platforms that you are deploying the packages to, then click Next:•Send this task to all computers• Send this task

3Enable Manage FileVault | Turn On (Enable) FileVault.You can also enable other policy options, as required. For more information, see the Productpoli

3Select a system, then click Actions | Agent | Modify Policies on a Single System to open the Policy Assignmentpage for that system.4From the Product

10Next to Tags, select the desired platforms that you are removing the packages from, then click Next:•Send this task to all computers• Send this task

Manually uninstall MNE from the client systemYou can manually uninstall MNE from the client system, although McAfee ePO has all the requiredfeatures f

2Installing MNEReporting FIPS status to client systems18Management of Native Encryption 1.0 Product Guide

3Managing policiesYou can manage the MNE client systems from McAfee ePO through a combination of product policies.You assign policies to the required

COPYRIGHTCopyright © 2013 McAfee, Inc. Do not copy without permission.TRADEMARK ATTRIBUTIONSMcAfee, the McAfee logo, McAfee Active Protection, McAfee

Product policiesOn the Policy Catalog page, the policies for the Management of Native Encryption 1.0.0 product appear under theFileVault Product Setti

Table 3-1 Product policies (continued)Settings DescriptionDisplay the following message when enabling FileVault — The user receives a predefined mes

Assign a policy to a systemYou can assign a policy from the Policy Catalog to any system or system group. Assignment allows youto define policy settin

Enforce MNE policies on a systemEnable or disable policy enforcement on a client system. Policy enforcement is enabled by default, andis inherited in

3Managing policiesEnforce policies to a group24Management of Native Encryption 1.0 Product Guide

4Managing client systemsSystem management allows you to import system information into McAfee ePO. This is useful in theprocess of installing MNE and

Option ActionCredentials for agent installationType valid credentials to install the agent:• Domain — Type the domain of the system.• User name — Type

Table 4-1 System actions Option DescriptionFileVault RecoveryYou can recover a system, if a user reports accessibility issues to that system. Toreco

4Managing client systemsHow to run the MER tool28Management of Native Encryption 1.0 Product Guide

5Managing MNE reportsMNE queries are configurable objects that retrieve and display data from the database. These queriescan be displayed in charts an

ContentsPreface 5About this guide ... 5Audience ... 5Conventions ...

TaskFor option definitions, click ? in the interface.1Log on to the ePolicy Orchestrator server as an administrator.2Click Menu | Reporting | Queries

6On the Columns page, from the Available Columns pane, select the columns to be included in the query,then click Next.If you had selected Table on the

4Next to Dashboard Name, type a name for the dashboard.5Next to Dashboard Visibility, select one of these options, as required:• Private — To make the

Event ID Event Description Event Type35221 This event is reported in McAfee ePO when disabling FileVault is failed asthe recovery key is unavailable,

5Managing MNE reportsMNE client events34Management of Native Encryption 1.0 Product Guide

6Recovering systemsSystem recovery is a process of recovering a user's system from system crashes, systemmalfunctions, accessibility issues, and

TaskFor option definitions, click ? in the interface.1Log on to the ePolicy Orchestrator server as an administrator.2Click Menu | Systems | System Tre

3On the Enter serial number page, type the Serial number of the system that you received from the user,then click Next.This step is not applicable if

6Recovering systemsPerform system recovery38Management of Native Encryption 1.0 Product Guide

IndexAabout this guide 5agent wake-up call, sending 13Cclient events, viewing 29client systemsactions 26adding and importing 25managing 25moving 26rec

Queries as dashboard monitors ... 29View the standard MNE reports ... 29Create MNE custom queries ..

reports, MNE (continued)viewing 29requirements, MNE 10SServicePortal, finding product documentation 6software package, MNEremoving 14–16software packa

0-00

PrefaceContents About this guide Find product documentationAbout this guideThis information describes the guide's target audience, the typo

Find product documentationMcAfee provides the information you need during each phase of product implementation, frominstallation to daily use and trou

1IntroductionMcAfee® Management of Native Encryption (MNE) is a management product that allows McAfee®ePolicy Orchestrator® (McAfee ePO™) administrato

Product extensions and packagesThe MNE extension that is installed on McAfee ePO allows managing and reporting of FileVault on Macsystems by deploying

2Installing MNEYou need to perform a set of tasks to complete the installation process on the required client systemsand manage them using McAfee ePO.