After you have installed the Policy Agent and the Bootloader on the device and you have made sure that the device meets the prerequisites described in Requirements for Windows Boot Drive Encryption, you can encrypt the boot drive using any of the standard disk encryption methods.

• If you want to use the Cryptographic Security Platform Vault webGUI, see Encrypting a Disk Using the CSP Vault for VM Encryption webGUI.
• If you want to use the Entrust Policy Agent GUI, see Encrypting a Windows Disk Using the Entrust Policy Agent GUI.
• If you want to use the CLI, see Encrypting a Disk Using the CLI.