Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Unable to install Full Disk Encryption (FDE) on a Self-Encrypting Drive (SED)

    • Updated:
    • 29 Sep 2015
    • Product/Version:
    • Endpoint Encryption 5.All
    • Platform:
    • Windows 10 32-bit
    • Windows 10 64-bit
    • Windows 7 32-bit
    • Windows 7 64-bit
    • Windows 8 32-bit
    • Windows 8 64-bit
    • Windows 8.1 32-bit
    • Windows 8.1 64-bit
    • Windows Embedded POSReady 7 (32-bit/64-bit)
    • Windows Vista 32-bit
    • Windows Vista 64-bit
    • Windows Vista SP1 32-bit / 64-bit
    • Windows XP SP3 32-bit
Summary

You receive the following error message when installing FDE:

The Installer has detected that a version of DriveArmor is already installed. Please uninstall that version first before you continue.

You will not be able to install even when using the forcesoftware switch.

Details
Public

The issue happens because the hard drive on the system is a Self-Encrypting Drive (SED) and disk is in eDrive mode. Since Windows 8, Microsoft has enabled by default the eDrive feature during the installation of the operating system when the disk is an OPAL 2 SED. This prevents the FDE installation on the SED.

To resolve the issue, the drive has to be reset to factory settings. This process requires a 32 digit Physical Security ID (PSID) that is printed on the drive label. 

Then you need to install Windows 8 again and disable eDrive during the installation.

 
This will wipe all data on the drive.

Use the tool from disk vendor:

We only support the Seagate and Sandisk self-encrypting drives and will install FDE in software mode for other SEDs. Since installation in software mode is also prevented when the disk is in eDrive mode, please refer to the drive vendor to get the specific process to reset the drive to factory settings.

    1. Boot to the Windows 8/8.1/10 setup DVD.
    2. Press shift-F10 to load a command prompt.
    3. Type the following then press Enter:

      reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\EnhancedStorageDevices" /v TCGSecurityActivationDisabled /t REG_DWORD /d 1 /f

    4. Close the command prompt and continue with the operating system install.
 
If you are using an image to deploy on machines, make sure that this registry setting has been applied on the machine where the image will be taken from.
Premium
Internal
Rating:
Category:
Troubleshoot; Install
Solution Id:
1112450
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.