User manual SOPHOS SAFEGUARD REMOVABLE MEDIA 2.00

[. . . ] mêçÑÉëëáçå~ä=fqJpÉÅìêáíó=Ñçê=óçìê=`çêéçê~íáçå p~ÑÉdì~êÇ=oÉãçî~ÄäÉjÉÇá~ sÉêëáçå=OKMM táåÇçïë=um táåÇçïë=sáëí~ www. utimaco. com CONTENT CHAPTER 1 What is SafeGuard RemovableMedia?1 1. 1 Supported media . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 CHAPTER 2 Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 2. 1 Interactive installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Each drive is displayed separately. SafeGuard RemovableMedia 14 CHAPTER Detailed description 4 4. 3 Encrypt new and modified files When you select this option, all files that are written to the removable medium will be encrypted. Files that are already stored on the medium remain in plain, but you cannot open them. This option does not affect files that are already stored on the removable medium! 4. 4 Keys Before you can encrypt data you need an encryption key. If you select an encryption option, you must then create or select a key so that you can encrypt the data. A key consists of a name and a passphrase. SafeGuard RemovableMedia 15 CHAPTER Detailed description 4 4. 5 Manage/Manage Keys When you click the Manage button, the Manage Keys window opens. In this window you can add a key, set a key to passive (after which you can only use the key to decrypt data, not to encrypt it) or back up or restore a key. SafeGuard RemovableMedia 16 CHAPTER Detailed description 4 4. 5. 1 Creating keys To create a key, proceed as follows: 1. Enter a Key Name (key names are case sensitive!) and a Passphrase for the key. SafeGuard Removable Media automatically generates a unique name for the key. The key will also be displayed under this name in the list of available keys. If you enter an insecure passphrase, a warning message will be displayed. To enhance the level of security, we recommend the use of complex passphrases. However, you can decide to use the insecure passphrase despite the warning message. HINT: To exchange encrypted data, you have to provide the passphrase of the key used for encryption to the relevant recipient. Once you both share the same key, you can exchange encrypted data After clicking OK the key will be displayed in the control dialog's key list and you can select it for each SafeGuard RemovableMedia 17 CHAPTER Detailed description 4 drive. Now you can decrypt all data that have been encrypted using one of the keys included in your key ring. 4. 5. 2 Importing key from file If you have received removable media containing encrypted data which has been encrypted using a key that is not included in your key ring, you can import the required key to your key ring. The person who has encrypted the data has to provide you with the passphrase. Select the relevant file on the removable media and choose SafeGuard Removable Media > Import key from the file's context menu. Enter the passphrase in the dialog displayed. Dispose key upon logoff If you activate this option, the key will only be added temporarily to your key ring. As soon as you log off from Windows or reboot the computer, the key will no longer be available. If required, it has to be imported again. SafeGuard RemovableMedia 18 CHAPTER Detailed description 4 4. 5. 3 Setting a key to passive If you set a key to passive it can no longer be used to encrypt data. However, if you used this key to encrypt data you can still use it to decrypt this data. In the Manage Keys window, click the Retire Key button and then, in the Retire Key window select the key you want and click OK. [. . . ] Syntax: sgrmcmd RESTORE key backup file identifier option SafeGuard RemovableMedia 40 CHAPTER Administration 6 Here you can enter: -E -H -L This marks the key as non-exportable. Although the key can still be used for decryption, it can no longer be used to encrypt files. This option presents a certain security risk because this key is "available" to everyone who logs on to your computer. -O Overwrites a key that has the same name. Create Key Generates a new key. [. . . ]