Hi RMills1! It sounds like we are not able to validate the certificate or the chain of the certificate that is being provided by the client to the Dell Security Management Server. The service that handles activations, the Dell Security Server, leverages a java keystore for the certificates that it is aware of and any trusts that it may hold. This keystore will need to be updated to hold the root and the intermediate certificate that are being used in the chain for the smartcard certificates that have been issued to your users for login. To update this, we can leverage keytool that is built into the Dell Security Management Server to import the certificate into the keystore. This KB Article, specifically under the section of "Dell Data Protection | Enterprise Edition Configuration" should point you in the right direction: [URL] I will work with the team to separate this section out to its own KB article and get a bit more detail around why this may be needed.  Let us know if this does or does not work for you!
Hello, We are trying to start deploying Dell Encryption Enterprise to our laptops/tablets using Policy based FFE.  It works successfully for our users that log into the laptop with their username and password.  However, users that log into their laptop with a smart card (using standard Windows Smart Card logon, no special GINA) are not registered properly to the Dell Security Server, so the laptop doesn't encrypt. CMGShield.log has the following: I verified going to the server address works successfully with no certificate errors, so I think it's having an issue with the smart card certificate representing the user.  I've tested this with both a new user (not in the DDS Server), and a user that already exists in DDS, but the result is the same. Anyone have any ideas? Thanks, RMills1
FFE doesn't encrypt for smart card users