In short: Bitdefender GravityZone Full Disk Encryption is an add-on that manages the encryption built into Windows (BitLocker) and macOS (FileVault) from the GravityZone console. It applies encryption by policy, keeps recovery keys centrally so locked-out users can be helped, and reports encryption status. Through Forever Systems it is licensed per endpoint and billed monthly.
What GravityZone Full Disk Encryption is
A lost or stolen laptop is only a hardware problem if its disk is encrypted. Without encryption, it can become a reportable data breach. Windows and macOS both include strong disk encryption, BitLocker and FileVault, but switching it on device by device, keeping track of recovery keys and proving which machines are protected is hard work.
GravityZone Full Disk Encryption is an add-on module for GravityZone Cloud MSP Security that manages the operating system's native encryption for you. Because it uses the encryption already built into Windows and macOS rather than a separate encryption engine, there is no extra encryption product to maintain.
What is included
| Feature | What it does |
|---|---|
| Policy-based encryption | Encrypts device disks according to the policy assigned in the console |
| Windows | Manages BitLocker, the encryption built into Windows |
| macOS | Manages FileVault, the encryption built into macOS |
| Central key management | Recovery keys are held centrally so an administrator can help a user who is locked out |
| Reports | Encryption status per endpoint, for audits and insurance questionnaires |
There is no separate key management server to run, and access to recovery keys is controlled by console roles.
How it is licensed
Full Disk Encryption is licensed per endpoint on top of your GravityZone base licence, and billed monthly through your Forever Systems account. Most organisations enable it on laptops and other portable devices first, then decide whether desktops in secure offices need it too. Prices depend on the number of endpoints, so ask us for a quote.
Requirements and deployment
- Windows: BitLocker is part of Windows Pro, Enterprise and Education, not Windows Home, so Home devices need upgrading before they can be managed this way.
- macOS: FileVault is built into macOS and is managed through the Bitdefender agent.
- The Bitdefender agent with the encryption module enabled by policy.
We check which devices are already encrypted and where their recovery keys are, plan how existing encryption is brought under central management, and roll out in groups so users know what to expect at the next restart. We confirm hardware and operating system requirements against Bitdefender's current documentation before rollout.
Encryption and UK GDPR
UK GDPR expects appropriate technical measures to protect personal data, and the ICO recommends encryption, particularly for portable devices. Encryption does not make you compliant on its own, but if an encrypted laptop is lost and the key is not compromised, the risk to individuals is much lower. A central report of encrypted devices also makes insurance and customer due diligence questionnaires quicker to answer.
Who it suits and how we help
It suits any organisation with laptops leaving the office, especially those handling client or health data, and teams that have BitLocker switched on in places but no record of where the recovery keys are. We set the policy, deploy encryption, keep the key store tidy as devices are replaced, and handle recovery requests when someone is locked out. Contact us for a quote.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Does Bitdefender Full Disk Encryption use BitLocker?
Yes. It manages the native encryption of each operating system: BitLocker on Windows and FileVault on macOS.
Where are the recovery keys stored?
Centrally, managed through the GravityZone console, so an authorised administrator can help a user who is locked out of their device.
Does it work on Windows Home?
BitLocker is not part of Windows Home, so a Home device needs upgrading to Windows Pro, Enterprise or Education before its encryption can be managed this way.
Is encryption included in GravityZone Cloud MSP Security?
No. Full Disk Encryption is an add-on module licensed per endpoint.