Device encryption is not yet enabled by policy

Hi Phil,

Please login to Sophos Central Dashboard and select Encryption under My Products. Go to Policies| select the policy| select settings and check if "Enable encryption of endpoints" is enabled.

Hi,

Yes, it is enabled. See screenshot below.

Thanks,

Phil

Hi Phil,

Please enable Device Encryption and wait for the client machine to sync. Let me know if this resolves your issue.

Hi Haridoss,

Thank you for responding but I don't understand. Device encryption is enabled according to the UI. How else can I go about enabling it?

Thanks,

Phil

Hi Phil,

Please find below the screenshot which shows that Device Encryption is disabled.

Hi Haridoss,

I deliberately avoided turning that on because it says 'ignore the settings in this policy' and on the policy page it shows this policy as being 'enforced', so my assumption was it is used to turn the policy off! Plus underneath is a setting that says 'Enable encryption of endpoints' which sounds a lot like the setting you need to turn it on

Based on your advice I have selected it. The policy page still says 'enforced' and the client device, despite being restarted twice, and leaving it for a couple of hours still hasn't shown any signs of trying to encrypt. If I check the Computer page it shows that the device last activity was 3 minutes ago (following another restart) and it has updated 3 times this afternoon.

Thanks,

Phil

Hi Haridoss,

We have it sorted. We clicked the 'Manage Endpoint Software' button on the computers tab and for some reason our test device appeared under 'eligible computers' rather than 'assigned computers'. Once we selected the device and moved it into the assigned column it caused the laptop encryption to start.

I think there are some UI and process improvements that would help circumvent these issues but thank you for your help, and I'm pleased to be able to finally test the product.

Best regards,

Phil

Hi Haridoss,

We have it sorted. We clicked the 'Manage Endpoint Software' button on the computers tab and for some reason our test device appeared under 'eligible computers' rather than 'assigned computers'. Once we selected the device and moved it into the assigned column it caused the laptop encryption to start.

I think there are some UI and process improvements that would help circumvent these issues but thank you for your help, and I'm pleased to be able to finally test the product.

Best regards,

Phil