Enterprise management infrastructure = Active Directory.
That's the "AD" in "KTM ES AD".
>>> Active Directory — KTM Enterprise Server AD uses Active Directory for user authentication and policy management. Access control and authentication is achieved by role-based authentication and is integrated with Active Directory user authentication. <<< http://www.wave.com/products/ktmes.html#Active
>>> Recovery mode is also used if a disk drive is transferred to another system. Recovery mode requires a recovery key that is generated when Secure Startup is enabled, and that key is specific to one machine. As a result, Secure Startup is intended for enterprises with a management infrastructure in place to store the recovery keys, such as Active Directory. Otherwise, there is the potential for data loss if a computer fails and its drive is moved to another computer and the recovery key is not available. <<< http://www.microsoft.com/technet/windowsvista/evaluate/feat/secfeat.mspx#EBAA