After deploying the Symantec Encryption Endpoint package on a client machine, there is not an option to modify or change the XPM image for a custom logo to be used on the Drive Encryption Pre-Boot authentication screen.
Group policy or SEE Native Policy allows the XPM images to be updated during the SEE Client creation only and not via policy.
As a workaround to this issue, building a new version of the SEE Client and performing an "Upgrade" will resolve this issue.
To do an upgrade, you will go from one version to another, such as 11.3.1 GA to 11.3.1 MP1, or 11.3.1 to 11.4. Once the upgrade is completed, the images should then be updated.
If you would like to be able to update your custom images via policy, please reach out to Symantec Encryption Support and mention this article.
Please be sure to refer back to this document periodically as any changes to the status of the request will be reflected here.
ISFR-2222
EPG-21128, EPG-20751