Central Encryption - user based policy??

Question

Hallo, 
 I test Sophos Central Encryption software. I see that it desnt do much more than manages Bitlocker in certain way. It turns on the encryption, stores keys, forces PIN and prevents user from switching it off. OK it is what I need and all is computer realted business. 
 What I dont get is "User Based Policy". I would say that Encryption must be asociated to computer therefore the policy is suposed to be device related one. The encryption is supposed to take place before the computer even starts. 
 Why there is "User Based Policy"? 
 Thank you much for pointing the direction. Pavel

Jasmin · Answer

Hi Pavel Vanek 
 Central device encryption supports both Windows and MAC machines to manage BitLocker and FileVault encryption for respective machines. 
 As you mentioned above Device encryption just manages these two encryptions on the respective operating system. 
 BitLocker is device-specific irrespective of numbers of user profiles on the machine, While FileVault is user-specific. 
 FileVault stores user profile's password as the passphrase to unlock the hard drive while BitLocker uses the unique key to unlock the hard drive, irrespective of users. 
 For more information on the FileVault, please refer to this link . 
 Because of FileVault and BitLocker support, we have provided two types of policy for device encryption, please refer the setting section in this link .