Create an Encryption profile to secure your data on Windows Desktop devices using the native BitLocker encryption.

To create an Encryption profile:

  1. Navigate to Devices > Profiles > List View > Add and select Add Profile.

  2. Select Windows and then select Windows 7 .
  3. Configure the profile General settings.

    These settings determine how the profile deploys and who receives it. For more information on General settings, see Add General Profile Settings.

  4. Configure the Encryption settings:

    Settings Descriptions
    Encrypted Volume

    Use the drop-down menu to select the type of encryption as follows:

    • System Partition – Encrypts a partition or drive in the same location where Windows is installed and from which it boots.
    • Complete Hard Disk – Encrypts the entire hard disk on the device, including the System Partition where the OS is installed. This option also encrypts any attached drives such as USB drives.


      If any additional devices are included during encryption, you must decrypt the additional drives and the complete hard disk. If you decrypt the hard disk without including the additional drives, you will be unable to decrypt the additional drives.

    Enforce Encryption PIN on Login Select to require users to enter a PIN upon starting the device.
  5. Select Save & Publish when you are finished to push the profile to devices.