Laptop Encryption

All laptops in STFC must be encrypted with the Pointsec software. To enrypt a laptop with Pointsec just follow the steps below:

• login tolaptop with a clrc account with local admin privileges
• go to Computer and mount the network drive: \\infosec06\STFC (reconnect on logon!)
• openWindows Command Prompt (cmd.exe) using Run as Administrato option
• go to \\infosec06\STFC end right click on the batch file INSTALL_POINTSEC.BAT and then Edit
• copy the whole content of it and paste it into the command prompt
• press enter
• after that the .msi file will run and Windows will automatically restart. Instead of going straight to Windows you'll see the Pointsec welcome screen, asking for username and password
• login with Pointsec admin account (login information can be found in our KeePassX password database under Pointsec 7.4)
• then login to Windows with clrc account with local admin privileges
• at this stage you can leave the laptop until the ebryption process is done, it usually takes about a few hours. Make sure you disabled the sleep mode in laptop!
• When the encryption process is finished, go to Checkpoint Management Console, login with Pointsec admin account and create accounts for cgadminlx and for the laptop's user as well (you will need to go to local settings and then you will find local users in the navigation pane on the left hand side.
• Remember to tick the box User must change his password on the next logon when you create the account for the laptop's user!

In case the laptop has Pointsec already installed, but it's not the 7.4 version, you will have to migrate user (reinstall Pointsec). To do that you will just need to run the batch file ...... PAGE BUILDING IN PROGRESS......

Logon to the laptop with a CLRC account that has local admin rights

Upgrade file://infosec03.itd.rl.ac.uk/pointsec copy the ppd.bat file to the laptop. run cmd as an admin and run the bat file

New installation file://infosec06.stfc.ac.uk/stfc/install/pointsec run the bat file as an admin