Symantec Drive Encryption System Requirements

Supported Operating Systems

Windows and Windows Server

  • Microsoft Windows 10 Anniversary Update Enterprise (32-bit and 64-bit editions)
  • Microsoft Windows 10 Anniversary Update Pro (32-bit and 64-bit editions)
  • Windows 10 November 2015 Update (32-bit and 64-bit editions)
  • Windows 10 Enterprise (32-bit and 64-bit editions)
  • Windows 10 Pro (32-bit and 64-bit editions)
  • Windows 8.1 November 2014 Update (32-bit and 64-bit editions)
  • Windows 8.1 Update 2, August 2014 (32-bit and 64-bit editions)
  • Windows 8.1 Update 1, May 2014 (32-bit and 64-bit editions)
  • Windows 8.1 Enterprise (32-bit and 64-bit editions)
  • Windows 8.1 Pro (32-bit and 64-bit editions)
  • Windows 8 Enterprise (32-bit and 64-bit editions)
  • Windows 8 Pro (32-bit and 64-bit editions)
  • Windows 7 Enterprise (32-bit and 64-bit editions, including Service Pack 1)
  • Windows 7 Pro (32-bit and 64-bit editions, including Service Pack 1)
  • Windows Server 2012 R2 64-bit Edition with internal RAID 1 and RAID 5
  • Windows Server 2012 64-bit Edition with internal RAID 1 and RAID 5
  • Windows Server 2008 R2 64-bit Edition with internal RAID 1 and RAID 5

Notes:

  • The above operating systems are supported only when all of the latest hot fixes and security patches from Microsoft have been applied.
  • Symantec Drive Encryption is not compatible with 32-bit systems running in UEFI mode.
  • Symantec Drive Encryption is not compatible with other third-party software that could bypass the Symantec Drive Encryption protection on the Master Boot Record (MBR) and write to or modify the MBR. This includes such off-line defragmentation tools that bypass the Symantec Drive Encryption file system protection in the OS or system restore tools that replace the MBR.
  • Symantec Encryption Desktop does not support the Device Guard Feature on Windows 10 systems (any version).
  • The Windows 10 anniversary update provides a feature that enables you to disable legacy drivers. To avoid accidentally disabling the Symantec File Share Encryption feature, Symantec recommends that you retain legacy drivers in the active state.
  • Symantec Encryption Desktop does not support operating system upgrades on encrypted systems through the Windows Update service.

For further information about Windows and Windows Server support, refer to the full system requirements: https://support.symantec.com/en_US/article.TECH236572.html.

Mac OS X

  • For Symantec Drive Encryption users: Mac OS X 10.9.5 and 10.10.x
  • For Symantec Encryption Desktop for FileVault users: Mac OS X 10.11.x, 10.12, and 10.12.1

For further information about Mac OS support, refer to the full system requirements: https://support.symantec.com/en_US/article.TECH236573.html.

Linux

  • Ubuntu 12.04 LTS, 12.04.5 LTS, 14.04 LTS, 14.04.4 LTS; (32-bit and 64-bit versions)
  • Red Hat Enterprise Linux/CentOS 5.10, 5.11, 6.6, 6.7, 7.0, 7.2 (BIOS only, 32-bit and 64-bit versions)

Note: Symantec Drive Encryption for Linux is command line only. More Detailed Requirements: https://support.symantec.com/en_US/article.TECH236592.html.

Supported Keyboard Languages

Symantec Drive Encryption for Windows

  • English (United States, United Kingdom, US-International)
  • Belgian (Belgium; Comma), Belgian (Belgium; Period)
  • Bosnian (Bosnia), Bosnian (Bosnia; Cyrillic)
  • Bulgarian (Bulgaria), Bulgarian (Bulgaria; Latin), Bulgarian (Bulgaria; Typewriter)
  • Canadian Multilingual Standard (Canada)
  • Chinese Simplified (China, Singapore), Chinese Traditional (Hong Kong, Taiwan)
  • Croatian (Croatia)
  • Czech (Czech Republic; QWERTY)
  • Danish (Denmark)
  • Dutch (The Netherlands)
  • Estonian (Estonia)
  • Finnish (Finland)
  • French (Belgium), French (Canada), French (France), French (Switzerland)
  • German (Germany/Austria), German (IBM), German (Switzerland)
  • Hebrew (Israel)
  • Hungarian (Hungary), Hungarian (Hungary; 101 keys)
  • Icelandic (Iceland)
  • Irish (Ireland)
  • Italian (Italy), Italian (Italy; 142 keys)
  • Japanese (Japan)
  • Korean (Korea)
  • Norwegian (Norway)
  • Polish (Poland; Programmers), Polish (Poland; 214 keyboard)
  • Portuguese (Brazil; ABNT keyboards), Portuguese (Brazil; ABNT2 keyboards)
  • Portuguese (Portugal)
  • Romanian (Romania)
  • Russian (Russia; Cyrillic)
  • Serbian (Serbia and Montenegro; Cyrillic), Serbian (Serbia and Montenegro; Latin)
  • Slovak (Slovakia)
  • Slovenian (Slovenia)
  • Spanish (Spain), Spanish (Latin America), Spanish Variation
  • Swedish (Sweden)
  • Turkish (Turkey; F), Turkish (Turkey; Q)
  • Ukrainian (Ukraine)

Symantec Drive Encryption for Mac OS X

  • English (US-International)
  • Japanese (Japan)
  • German (Germany); German (Switzerland)
  • French (France); French (Switzerland)
  • Spanish (Latin America), Spanish (Spain; ISO)

Supported Disks

  • Desktop or laptop disks (partitions in the case of Windows, or the entire disk for Windows and Mac OS X)
  • External disks, excluding music devices and digital cameras
  • USB flash disks
  • Solid-state drives

Unsupported Disks

Windows

  • Dynamic disks
  • SCSI drives/controllers
  • Software RAID disks
  • Diskettes and CD-RW/DVD-RWs

Mac OS X

  • Disks formatted using the APM partition scheme
  • Any type of server hardware, including RAID disk drives and software RAID drives
  • Diskettes and CD-RW/DVD-RWs
  • exFAT formatted disks
  • Any configuration where the system partition is not on the same disk as boot partition

Authentication Options

  • OpenPGP RFC 4880 keys
  • X.509 keys

Symmetric Key Algorithms

  • AES 256-bit keys
  • AES 128-bit keys (enabled on Symantec Encryption Management Server)

Centralized Management Requirements

Symantec Drive Encryption optionally may be centrally managed by Symantec Encryption Management Server (powered by PGP™ Technology), which requires a dedicated hardware server. For supported hardware and other information, please refer to the Symantec Encryption Management Server technical specifications.

Two-Factor Authentication (Windows Only)

Generic Smart Card Readers

Most CCID smart card readers are compatible. The following readers have been tested by Symantec Corporation:

  • OMNIKEY CardMan 3121 USB for desktop systems (076b:3021)
  • OMNIKEY CardMan 6121 USB for mobile systems (076b:6622)
  • ActiveIdentity USB 2.0 reader (09c3:0008)
  • SCM Microsystem Smart Card Reader model SCR3311
  • CyberJack smart card readers - Reiner SCT CyberJack pinpad (0c4b:0100)
  • ASE smart card readers - Athena ASEDrive IIIe USB reader (0dc3:0802)
  • Embedded smart card readers - Dell D430
  • Embedded smart card readers - Dell E6410 and E6510 (Broadcom)

Compatible Smart Cards or Tokens for Symantec Drive Encryption Authentication (Windows Only)

Supported smart cards for pre-boot authentication:

  • ActiveIdentity ActivClientCAC cards, 2005 model
  • ActiveIdentity ActivClient CAC cards, 2005 and older
  • Charismathics CryptoIdentity plug 'n' crypt Smart Card only stick
  • EMC RSA Smart Card 5200
  • Gemalto ASECard Crypto Smart Card
  • Gemalto Cyberflex Access 32K V2
  • Gemalto Cyberflex Access 64K v2c
  • HID Global Crescendo JCOP 21 version 2.4.1 R2 64K
  • Marx CrypToken MX2048 JCOP USB token
  • Oberthur 64K CosmopolIC v5.2
  • Rainbow iKey 3000
  • S-Trust StarCOS smart card (Note: S-Trust SECCOS cards are not compatible.)
  • SafeNet 330 smart card
  • SafeNet eToken PRO Java 72K
  • SafeNet eToken NG-OTP 32K
  • T-Systems Telesec NetKey 3.0 smart card

For details of supported Personal Identity Verification (PIV) cards, supported smart cards for storing user keys and supported smart cards for storing administrator keys refer to the full system requirements (Windows) here: https://support.symantec.com/en_US/article.TECH236572.html.