Skip to content

Disk encryption naming convention

BitLocker or FileVault policy under Endpoint security.

The pattern

Platform - Policy type - Purpose - Ring

WIN-SEC-BitLocker-PRD

21 of 64 characters for a policy or profile

What each part means

PartHereWhat it saysOther values
PlatformWINThe operating system.MAC, IOS, AND, LNX, WEB
Policy typeSECThe kind of policy or profile.CONF, COMP, APP, UPD, WIFI
PurposeBitLockerWhat the item does, in your own words.free text
RingPRDThe deployment ring or environment that receives it.PILOT, CAN, DEV, TEST, UAT

Parts are joined with “-”. In the builder you can change every value, the separator and the order, add parts and remove them.

When to use it

For BitLocker and FileVault policies under Endpoint security, Disk encryption.

  • Separate policies for operating system drives and removable drives are easier to troubleshoot.
  • Roll encryption out ring by ring: undoing a mistake is slow.

More names in this pattern

  • WIN-SEC-BitLocker-PRD
  • WIN-SEC-BitLockerRemovable-PILOT
  • MAC-SEC-FileVault-PRD
  • WIN-SEC-BitLockerSilent-PRD