Customising the ESET Endpoint Encryption (EEE) FDE login screen

Note: You must be using EEE Server version 2.9.1 or later

 Currently your UEFI FDE login screen looks like the image below:

You want to replace the current logo banner as shown below for your corporate logo:

EEE Server Installation

If you already have an EEE Server installed, please skip this step and refer to ‘Custom logo setup’.

• To begin, you can follow the knowledgebase article below for a step by step guide to install the EEE Server and carry out some configuration tasks.

KB119 - How do I set up my ESET Endpoint Encryption Server? 

Custom Logo Setup

On Legacy servers (2.9.3 and earlier) -

• Create a folder and name it “Custom” within the EEE Server root folder 
• Navigate to - C:\Program Files (x86)\ESET Endpoint Encryption Server (64 bit host) || C:\Program Files\ESET Endpoint Encryption Server (32 bit host)
• Insert the customised logo into the “Custom” folder.

On Multi-Tenant servers (2.10.10 and later) -

• You will need to Create a folder in the organisation instance ID folder
• To find the instance ID go to your Servers Control Panel, under Administration click Organisations, then click the organisation you want to apply the image to.
• Note the Instance ID of this organisation
• Navigate to - C:\Program Files (x86)\ESET Endpoint Encryption Server (64 bit host) || C:\Program Files\ESET Endpoint Encryption Server (32 bit host)
• Find the folder which matches the Instance ID 
• Create a folder and name it “Custom” within the Instance ID folder
• Insert the customised logo into the “Custom” folder.

Note: If you are upgrading your server from a previous version rather than 3. It may be called DESlock+ Enterprise Server

(The logo file must be named “user.png” and is suggested to be sized at 2250 x 90 pixels)

(The logo can be larger or smaller than stated above but must follow the same aspect ratio. The image itself within the bootloader is resized to width (according to the aspect) and will be cropped if the height is more than 120 pixels)

Start Full Disk Encryption

• You can now download an MSI from the Enterprise Server or carry out a Push Install to a client Workstation. For instructions on how to install a managed version of the Client software please see our knowledgebase article below:

KB253 - Installing a managed version of ESET Endpoint Encryption 

• From here you can carry out a Full Disk Encryption command either by activating the Workstation and issuing a Full Disk Encryption command as shown in our knowledgebase articles below:

KB216 - How do I activate a new client? 

KB101 - How to encrypt a hard drive using a managed version of ESET Endpoint Encryption? 

Or you can make use of the Auto Full Disk Encryption Feature by following our article below:

KB441 - Automatically Starting Full Disk Encryption (FDE) 

• When your Workstation has started encrypting, reboot the Workstation and the new logo will be displayed at the FDE login screen.

Your Workstation is already Encrypted

IMPORTANT: When using OPAL encryption, it is NOT possible to chance the banner after a Workstation has already been encrypted!

If your machine is already encrypted you can download a new merged installer with the modified logo banner applied and install it over the top of your existing client installation. Please refer back to the Custom Logo Setup section of this article to see how you can apply a customised logo banner in your Server. Once you have followed the steps you will need to download a new merged installer and install it on your client system, as seen in this article KB217 - How do I download a merged install for installation on a Workstation?

You can also add the logo manually on the client Workstation by mounting the ESP partition and copying the file onto it.

• Move your logo to an appropriate location i.e. C:\Windows\Temp
• Open an Admin Command Prompt
• Mount EFI partition
• Copy your logo into EFI partition folder ESET Endpoint Encryption

Z: will only be accessible as an administrator, so you won’t see it from Explorer. You will have to copy it using the command prompt, so make sure the user.png is in a suitable location.

If the drive Z: is being used, you will need to mount to a drive letter that is currently not in use.

• Reboot the Workstation, the new logo will be displayed at the FDE login screen.

Related Articles

KB455 - Which features can be customised? (managed clients) 

 Keywords: customise customized logo fde bootloader corporate