Skip to main content


Full Disk Encryption


This module is available for:

  • Windows for workstations

  • Windows for servers

  • macOS

The Encryption module manages full disk encryption on endpoints by leveraging BitLocker on Windows, and FileVault and the diskutil command-line utility on macOS, respectively.

With this approach, GravityZone is able to provide some consistent benefits:

  • Data secured in case of lost or stolen devices.

  • Extensive protection for the most popular computer platforms in the world, by using recommended encryption standards with full support from Microsoft and Apple.

  • Minimal impact on the endpoints’ performance due to the native encryption tools.

The Encryption module operates the following solutions:

  • BitLocker version 1.2 and later, on Windows endpoints with a Trusted Platform Module (TPM), for boot and non-boot volumes.

  • BitLocker version 1.2 and later, on Windows endpoints without a TPM, for boot and non-boot volumes.

  • FileVault on macOS endpoints, for boot volumes.

  • diskutil on macOS endpoints, for non-boot volumes.

For the list of operating systems supported by the Encryption module, refer to GravityZone requirements.


Availability and functioning of this feature may differ depending on the license included in your current plan.