Securely introduce Sophos Fusion Device Encryption
Sophos manages BitLocker and FileVault centrally. A secure rollout combines license, agent, policy, platform health and a resilient recovery process.
Sophos Device Encryption
BitLocker and FileVault remain the encryption technologies built into Windows and macOS. Sophos Device Encryption centrally manages policies, status and recovery keys; the additional Windows file-protection feature does not provide an email or delivery channel.
Table of contents
Sophos Device Encryption topic overview
The articles cover everything from planning and rollout to managing BitLocker and FileVault to recovery, diagnostics, migration, handoff, and password-protected files on Windows.
Planning and rollout 1
Clarify requirements and responsibilities, plan the rollout and check policy, local status and Central status.
BitLocker and FileVault 2
Set up, operate and check BitLocker on Windows and FileVault on macOS locally and in Sophos Fusion.
Manage BitLocker with Sophos Fusion
Instructions for the entire Windows process: check requirements, introduce and monitor BitLocker, restore devices, migrate them or decommission them …
Manage FileVault with Sophos Fusion
Sophos Fusion controls FileVault policies and manages personal recovery keys. The complete flow includes Apple permissions, local activation, key …
Recovery and troubleshooting 2
Securely retrieve recovery keys and then isolate BitLocker or FileVault issues using status, alerts, and diagnostic information.
Sophos Device Encryption: Securely retrieve recovery keys
These instructions take you from the legitimate recovery case through the device or ID search to the secure key disclosure and handover to the …
Sophos Device Encryption: Fix BitLocker and FileVault errors
Central status, local BitLocker or FileVault health, and recovery key availability are compared first. Only then take the appropriate action, …
Migration, handover and decommissioning 1
Record the initial state, choose the appropriate migration path and hand over, decrypt or decommission devices in a controlled manner.
Adopt or migrate Sophos Device Encryption
A decision-making aid for existing encryption: prove the initial state, secure access to the recovery key and switch to the appropriate BitLocker, …
Password protected files 1
Create password-protected HTML files on Windows and open them in a supported browser; Device Encryption does not provide a delivery channel.
Share password-protected files with Sophos Device Encryption
Sophos Device Encryption packages files on Windows with AES-256 into a password-protected HTML file that recipients open with a browser and a …