Encryption
Encryption management for every company device
Turn on BitLocker and FileVault, require encryption on iPhones, iPads and Android phones, see LUKS status on Linux, and store BitLocker recovery passwords and LUKS passphrases in the console.
trio.soHarbor & PineEndpoint Management ›DevicesDevices
- Open critical vulnerability · CVE-2026-21874
- Open high vulnerability · CVE-2026-20417
- Fails the check: no passcode or screen lock within 15 minutes
An unencrypted laptop is a reportable incident
Lost data
A lost laptop without encryption can expose everything on it.
No proof
Auditors ask which devices were encrypted, and when.
Lost keys
A recovery key nobody can find locks out the user too.
Per platform
Encryption on each platform
trio.so uses each platform's own encryption:
Windows
BitLocker policy, BitLocker checks and stored recovery passwords.
macOS
FileVault policy and encryption status on every Mac.
iPhone and iPad
Encryption required and checked on every device.
Android
Encryption required and checked on every device.
Linux
LUKS status reported, and LUKS passphrases stored in the console.
Policies
Turn on BitLocker and FileVault with a policy
Assign BitLocker and FileVault policies by group and see whether each device applied them, pending or failed.
Compliance
See which devices are encrypted
Encryption is part of the security checks on every device, so unencrypted devices show up in the console and in your compliance reports.
- Checked on every deviceDisk encryption on computers, encryption on phones.
- Evidence for auditsExport compliance evidence when an auditor asks.
Recovery keys
Recovery keys in one place
BitLocker recovery passwords and LUKS passphrases are stored in the console, next to the Mac lock PIN and the managed macOS admin password, so help desk staff can get a user back in.
Encryption at a glance
- 5
- platforms with encryption status
- BitLocker
- recovery passwords stored
- FileVault
- policy and status
- From $5
- per device, in every plan