Skip to content Skip to navigation

SWDE Information for Technical Support Staff

SWDE installation requirements

This is the list of settings that will be changed on your computer when you install Stanford Whole Disk Encryption. These settings will be maintained by BigFix/TEM.

Download SWDE without Enrollment

Answer file editor

Computer support organizations can use this program to create instances of the Enrollment/SWDE app to be incorporated into locally controlled computer deployment processes.

Escrow recovery key

At times, SWDE may not be able to encrypt the drive successfully. This could be due to an operating system incompatibility, or other reasons. If this occurs, you can encrypt the computer manually, then run this tool to escrow the recovery key outside of SWDE.

Note: On OSX, SWDE Encryption might fail with an error message saying that an encryption certificate was found that must be removed before FileVault2 can be enabled. This indicates that SWDE has found either FileVaultMaster.keychain or FileVaultMaster.cer in /Library/Keychains. If either of those files exists, delete them and try again.

There has been at least one report of the error appearing and neither file existed in /Library/Keychains. If this happens, try installing FileVault manually and running the Mac recovery key generation program.


The McAfee encryption service has been deprecated. Please move users to native encryption as soon as possible.


Last modified August 31, 2015