> Source: [sk184060](https://support.checkpoint.com/results/sk/sk184060)

# sk184060 - Windows 11: SSPR Link Fails When Harmony Endpoint Full Disk Encryption Is Enabled (E88.x)

| Property | Value |
|----------|-------|
| Solution ID | sk184060 |
| Date Created | 2025-09-25 |
| Last Modified | 2025-09-26 |
| Technical Level | General |
| Products | Endpoint Security |
| Versions | E88.X |

## Symptoms

- * After installing the Harmony Endpoint Security Client with Disk and Media Encryption on Windows 11, the *Reset Password link* on the login screen does not function.
* Clicking the Self-Service Password Reset (SSPR) link does not trigger any action; no browser window opens.
* The link worked correctly before installing the Harmony client.
* Attempts to trigger the reset via alternate methods (for example, clicking the password field arrow) fail.
* The issue persists across multiple machines and Harmony Endpoint Security clients.

## Cause

The Harmony Disk and Media Encryption component wraps the Microsoft credential provider, which interferes with the callback and event handling required for the SSPR link. Although the Harmony Endpoint Disk and Media Encryption provider passes the reset password link parameters correctly, changes in Windows 11 and Check Point's self-protection mechanisms disrupt the process flow. This prevents the browser from launching.  

Disabling self-protection temporarily resolves the issue, but this is not recommended due to security risks.

## Solution

1. Request Fixed Client Build  
   [](https://www.checkpoint.com/support-services/contact-support/)
   * [Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue - improved Endpoint Security Client package.
     * E88.32.2088 or later
     * E88.62.2047
   * A Support Engineer will make sure the Endpoint Security Client is compatible with your environment before providing it.
2. Deploy the Fixed Client  
   1. Install the CFG build on affected Windows 11 machines.
   2. Reboot the machine after installation.
3. Verify Functionality  
   Confirm that the SSPR link launches the browser and redirects to the reset page.

**Additional Notes:**   

* Do not disable self-protection as a workaround. It might increase security risks.
* Validate reboot availability before applying the fix.
* Issue is specific to Windows 11 and the Harmony Endpoint Disk and Media Encryption component.
* Test in staging before production deployment.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content