Yes- I'm wondering the same thing.
I've never had the need to deploy an sdat before.
In epo 3.6.1 there was an sdat check box in the product update list- that way you could target specific groups/ machines.
Can someone please explain how this deploys. I don't have global updating enbaled and so wondered if the deployment is via the dat product update.
OK- I created a clone of my server and installed it. It creates a new check box saying:
Endpoint Encryption HotFix1
That way you can customise your deployment to target machines/groups etc