Skip to main content

SDR for Windows User Guide

Requirements

  • An internet connection.
  • If you have not registered to the Stanford network, run through SNSR before starting this application.
  • Windows 10 or 11.
    Note: The policy for minimum software versions at Stanford is N-2, the current version plus the two most recently supported versions available. For more information, go to sunset.stanford.edu.
  • If you are mandated to have an encrypted computer, SDR will require a Windows version with Bitlocker available (Pro, Education, Enterprise, etc.).
    • To check if you can use Windows device encryption, follow these steps:
      • In the search box on the taskbar, type System Information. Right-click System Information in the results list, then select Run as administrator. Or you can choose Start, and then under Windows Administrative Tools, select System Information.
      • At the bottom of the System Information window, find Device Encryption Support. If the value says "Meets prerequisites," device encryption is available on your device.

Install SDR on Windows

Download SDR for Windows

Get started

  1. Download and run the installer.
  2. Select Yes to continue.
    Install homepage with a yes and no button.
     
  3. Authenticate with your SUNet ID and password. Approve the Duo two-step when prompted.
    Stanford login page to enter SUNet ID and password.
     
  4. For the following windows, click Next to move forward. 
    Start of device registration, enrollment, and encryption. Text on window is "There are the steps that need to be completed in order to safeguard your device: Registration, Enrollment, and Encryption. First, let's make sure the info we pulled from your SUNet IF is correct." Back and Next buttons.

    Window requests user verify their affiliation is listed correctly in a table below. Back and Next buttons.

    Safeguarding your devices on the Stanford Network window. Text says "How you answer the next set of questions will help determine whether you need to encrypt your devices on the Stanford network with our endpoint management system." Back and Next botton.

    How do we safeguard your devices window. Window lists how Stanford can safeguard your device, such as resetting lost or stolen devices, and viewing encryption status. Back and Next button.

    The types of data you use affects how we safeguard your device window. Text "Understanding what type of data you use helps us keep that data safe." Back and Next button.

    Device security and privacy window. Text "On this device, do you work with, or could you receive any high-risk data? (This excludes information about you and your family.) Option to select No or Yes. Back and Next buttons.
     
  5. Choose "No" or "Yes" and click Next.
    Device security and privacy window. Text "On this device, do you work with, or could you receive any high-risk data? (This excludes information about you and your family.) Option to select No or Yes. Back and Next buttons.
    Your device information will load.
    Window loading
     
  6. Check the box and click Next.
    Device information window. Lists SUNet ID, operating system, make/model. A check box to confirm if all information is accurate. Back and Next button.
    ​
  7. Choose the answer that best matches your use case for each question and click Next.
    Is this device shared by any peers or colleagues. Option to select No or Yes. Back and Next buttons.

    Are you the primary user window. Text reads, A primary user is the person responsible for the device and is listed as the primary user in MyDevices. Option to select Yes or No. Back and Next buttons.

    Is this a Stanford-owned device? window. Options to select No, Yes, or Unsure. Back and Next button. The Next button is selected.
     
  8. The following question determines your device’s eligibility for Stanford network access. If you answer “Yes,” choose your on-campus work location.
    Will you be using this device on a Stanford campus window. Option to select Yes or No.

    Will you be using this device on a Stanford campus window. Yes is selected, so a location selection dropdown menu appears.

    Will you be using this device on a Stanford campus window. User is selecting Cardinal Hall as their location on the dropdown menu.
     

  9. If the information looks accurate, click Next. Otherwise, click the pencil icon to edit your response and the SU Group selections.

    Known issues: The affiliation row can get crowded based on the user's information.

    Primary: User's Name window. Text: Please review the table below. We will use this information to determine if you need to encrypt your device.) Table below with affiliation, Department, High Risk Data, SU Group. Back and Next button.

    Edit window. Text tells users to reconsider their response to proceed with device enrollment. Note: Most users do not access High Risk Data. Ask users "On this device, do you have access to High Risk Data, excluding your own personal and family information. Option to select Yes or No. Cancel edit option and resubmit button.

    Edit Su Group window. Text ask user to select appropriate SU Group/Sub group for device. If user does not know what to select, they can choose a group from a dropdown menu that matches most closely to their department or unit.

    Drop down menu of department Group options.

    Dropdown menu of Unit options.
     

  10. Review your information. Then click Continue.
    This window asks user to review the table now that it's been updated.
     
  11. The following four windows cover encryption if you are mandated to be encrypted. Click Next to move forward.
    Enrollment and registration is complete window. Based on the user's Stanford affiliation and respective department, the best method to safeguard their device is encryption. Back and Next button.

    Whole Disk Encryption window. This is encryption status is the final step in SDR. First, SDR will check the computer to ensure is has required software and anti-malware.

    💡 Note: If you would prefer to manage the compliance of this device yourself, click the link in the left "Tip" section called "click here to install VLRE." You may need to scroll down on the left section to see the link.
    Whole Disk Encryption window. The user will now start the encryption process by SDR helping verify the device has the required software and anti-malware. Back and Next Button.
     
  12. Review the encryption guide, then check the box to continue.
    Encryption Guide window. The guide lists frequently asked questions regarding the encryption process (for example How long will it take?) User has a checkbox to select they understand the risk and wish to continue. Back or Next button.
     
  13. Review the policy agreement, then click Agree to continue.
    Policy agreement window. Users is asked to review the policy below and then select agree or disagree.
     
  14.  Click Next to begin running updates, configurations, and software installs. Be sure your computer is plugged into a power source and connected to the internet.
    SDR will now begin running updates and patches for the device and asks user to plug device to a power source and connect to internet.
     
  15. Software and configurations will be installed. Expect this process to take two or three minutes.
    Loading configuration files window.

    Installing BigFix Client window.

    BigFix installed successfully window.

    Note: During the encryption process, you'll see the BitLocker notification in the lower right corner.
    Encrypting device window.PowerShell window that says Encryption in Progress.

    Note: A PowerShell window will pop up behind the application during the system updates. This window will go away by the end of the program. If the window remains open once you're done, you can close it.
    Installing available System updates window.

    Installing available DCM Patches window.DCM patches complete window.
     
  16. Automations have been completed. Click Continue.
    Automations completed window. Select continue.
     
  17. Save your Bitlocker key by clicking on the download button
    Bug: This doesn't work now, but you can grab a screenshot by pressing the Windows key + Shift + "S" or with your phone's camera.
    Your encryption key window. Option to download key. Next button.
     
  18. Review your compliance requirements, then click Next.
    Note: There is a PowerShell window that will open behind this window. It will go away as you proceed with the application. You can close it if it remains open when you are done with the process.
    Stanford Compliance requirements window. Encryption, Compliance Agent, and Device Enrollment are are checked. Option to run checks again, go back, or next.
     
  19. That's all. Click Done to close the program.
    alt="You have completed Device Encryption window. Users should restart computer. Note: It may take another 24-48 hours for updates to appear in MyDevices. Back or Done button.
Last modified