This release focuses on strengthening security and resolving customer-reported issues. It hardens the installation and upgrade process, improves the management of self-protection during connectivity disruptions, and improves upgrade and policy enforcement processes.
What is included in this release:
- Stronger installation integrity: The secure boot certificate check PowerShell script used during installation is now digitally signed using Musarubra LLC certificate to ensure integrity of the script, allowing it to run smoothly under stricter PowerShell execution policies in enterprise environments without requiring policy changes.
- More reliable Self Protection: Self protection is now enforced consistently, so administrators can safely manage it even if the managed endpoints encounter SSL errors or SaaS connectivity issues.
- Updated security libraries: Underlying cryptographic and networking libraries have been updated to recent versions to enhance security.
- Customer-reported fixes: This release resolves several upgrade and policy enforcement issues, including incorrect event error messages, older product versions remaining in ePO after upgrade, and intermittent upgrade failures. See the Release Notes for the full list of resolved issues.
Prerequisites:
Before installing the TDE 8.1.x client package, administrators must update the Secure Boot database with "Microsoft UEFI CA 2023" and “Microsoft Option ROM UEFI CA 2023” on all Windows 10 and later systems. If the UEFI secure boot database is not updated with new CA 2023 signatures, the upgrade to Trellix Drive Encryption 8.1.x will intentionally abort. For more information, see UEFI CA 2023 certificate update for Trellix Drive Encryption (TDE) 8.1.x and Windows Secure Boot certificate inventory and EEDK (On-Prem only).
Upgrade impact:
- Endpoints require a system restart to activate the updated driver.
- The Trellix Drive Encryption Agent service restarts automatically during installation.
- ePO connectivity might be interrupted briefly during the service restart.
Refer to the following documentation for additional information and detailed instructions.