{"id":8902,"date":"2026-10-19T14:17:57","date_gmt":"2026-10-19T11:17:57","guid":{"rendered":"https:\/\/support.withsecure.com\/support-articles\/how-to-encrypt-system-drive-for-a-device-which-has-elements-agent-installed-on-it\/"},"modified":"2026-10-19T14:17:57","modified_gmt":"2026-10-19T11:17:57","slug":"how-to-encrypt-system-drive-for-a-device-which-has-elements-agent-installed-on-it","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/de\/support-articles\/how-to-encrypt-system-drive-for-a-device-which-has-elements-agent-installed-on-it\/","title":{"rendered":"How to encrypt system drive for a device which has Elements Agent installed on it?"},"content":{"rendered":"<h3>Issue:<\/h3>\n<p>We have Elements Agent installed on our devices with an Elements Endpoint Protection (Elements EPP for Computers or Servers) subscription. How can we from the Elements Security Center portal encrypt the system drive \/ disk?\u00a0<\/p>\n<p>\u00a0<\/p>\n<h3>Resolution:<\/h3>\n<p id=\"product-short-description\">Turning drive encryption on or off is an advanced security feature that comes with the WithSecure Elements EPP for Computers Premium and the WithSecure Elements EPP for Servers Premium subscriptions.<\/p>\n<div id=\"product-description\">\n<p>You must have a Windows device with Elements Endpoint Protection installed and a disk that was encrypted using BitLocker or FileVault.<\/p>\n<ol style=\"list-style-type: none;\">\n<li>1. Navigate to the <strong>Environment &gt; Devices<\/strong> page in the Elements portal<\/li>\n<li>2. Select the device whose drive you want to encrypt.<\/li>\n<li>3. From the action menu at the bottom of the page, select\u00a0<strong>drive encryption <\/strong>&gt; E<strong>ncrypt system drive<\/strong>, and then select one of the following:\n<ul style=\"list-style-type: square;\">\n<li>Encrypt only the used disk space (faster and the best for new PCs and drives)<\/li>\n<li>Encrypt the entire drive (slower but the best for PCs and drives that are already in use)<\/li>\n<\/ul>\n<\/li>\n<li>4, Select Encrypt<\/li>\n<\/ol>\n<p><strong>Note: <\/strong>The device must have a Trusted Platform Module (TPM) version 2 or higher. You can find information about your device&#39;s TPM version on the left-side menu in the Device details page.<\/p>\n<p>Recovery keys are an important part of managing disk encryption. If valid users get locked out of their devices or you need to restore data from an encrypted drive using a different device, you need the recovery key to access the data. There are many tools to collect these keys, but it is important that you use one of them. WithSecure Elements Endpoint Protection can collect recovery keys for you, if needed. you can find the setting in the General tab under Profiles.<\/p>\n<p><strong>Note:<\/strong> For collecting recovery keys, you need a Windows device with Elements Endpoint Protection installed and a disk that was encrypted using BitLocker with &quot;recovery password protector&quot;. After turning on the feature, we recommend verifying that recovery keys were successfully collected and that the keys are visible in WithSecure Elements Security Center.<\/p>\n<p>The recovery key can be found in the Elements portal on the device details page for a device:<\/p>\n<ol>\n<li>Log in to the Elements Security Center portal<\/li>\n<li>Navigate to the <strong>Environment &gt; Devices <\/strong>page<\/li>\n<li>Open the device details for a device by clicking the device<\/li>\n<li>In the <strong>Protection <\/strong><strong>status <\/strong>tab, expand the <strong>Endpoint encryption <\/strong>section\u00a0<\/li>\n<li>Expand the <strong>Encrypted drives <\/strong>section and you will then see the <strong>Show recovery key <\/strong>button<\/li>\n<li>You can copy the <strong>Recovery key <\/strong>and the <strong>Recovery key ID <\/strong>with the <strong>Copy to clipboard <\/strong>buttons<\/li>\n<\/ol>\n<p>\u00a0<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>We have Elements Agent installed on our devices with an Elements Endpoint Protection (Elements EPP for Computers or Servers) subscription. How can we from the Elements Security Center portal encrypt the system drive \/ disk?\u00a0<\/p>\n","protected":false},"template":"","support_article_product":[99],"class_list":["post-8902","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000011658","source_version":1,"source_system":"salesforce","source_date_updated":"2026-10-19 11:17:57","import_hash":"d6f05a5dbc8fd7ff5fa110de60a9a17c4b95dd4b","vanilla_article_id":"","vanilla_url":"","vanilla_kb_id":"","vanilla_category_id":"","machine_translated":false,"reactions_helpful_yes":"","reactions_helpful_no":""},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article\/8902","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/media?parent=8902"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article_product?post=8902"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}