Option 1 - PreBoot Authentication (PBA) with DE 
DE preboot requires a good, working implementation in firmware from the PC or tablet manufacturer. DE preboot can't work around any issues that lack any of the following:

• Simple Text Input / Simple Text Output (Keyboard *)
• Simple Pointer (Mouse)
• Absolute Pointer (Touch / digitizer)
• Storage Security Command (For OPAL)
  
  * NOTE: We extend the behavior of the keyboard with our own keyboard driver because of the need to translate the keyboards for different languages.
   

Back to Tablet Support table

Option 2 - TPM auto-boot with DE
The advantage of TPM auto-boot is that the device and drive become cryptographically married, and the boot process is cryptographically attested to make sure that no malware is inserted into the process. This is possible only on modern hardware because of the availability of UEFI and TPM.

DE can operate 'behind the scenes,' performing the boot attestation and encryption or decryption without the end user ever seeing it. If there's a change or error in attestation (for example, low-level malware), the DE preboot automatically and seamlessly comes to the forefront, and essentially performs a PBA lock of the system. No end user can get past this lock without logging back into the system. This feature, if used in conjunction with Secure Boot and password-protected BIOS, may prevent malware attacks. 

Support details:

• DE 7.1 already supports TPM auto-booting with TPM 2.0
• The release of DE 7.1.1 in June 2014 extends support for TPM 1.2-based TPM auto-boot
• Tablets and laptops that come with TPMs on Windows 8/8.1/8.1.1
   

Back to Tablet Support table

Option 3 - MNE (ePO management of BitLocker)
Starting July 2014, MNE 2.0 has added support for ePO management of Windows BitLocker.

This option may be better suited for a Bring Your Own Device type program because we support a capability called Reporting Only Mode, where MNE can check every five minutes if native encryption is enabled and is actively protecting the system. Because MNE doesn't have a preboot dependency, there's no requirement for additional UEFI protocol support.

MNE 2.0 includes the following product enhancements:

• BitLocker management - Parity with MNE 1.0 features
• Automated key rotation  - Mac OSX
• Additional language support - Korean, Chinese-Simplified, Chinese-Traditional
• Additional platform support 

Platform requirements

All our customers are licensed for one of the data protection suites. Both suites provide customers with the option to deploy DE or MNE. The choice is the customer's preference. We want our customers to pick the appropriate offering (DE or MNE) for their business needs.

Back to Tablet Support table