Specifications

Endpoint Encryption for Files and Folders Policy Settings
| 33
[PROFILE] = The user’s local user root directory, i.e.
[SYSDRIVE:\Documents and Settings\{USER}]
You may also type the UNC path for any folder residing on a network share, as well as
using a mapped drive letter to identify the folder to encrypt.
You may also browse the network for folders, as it is mapped and viewed from the
machine hosting your instance of the Endpoint Encryption Manager. By clicking the
Browse button a standard folder browser opens up that lets you select folders to
encrypt.
Select the folder you want to encrypt and then select what encryption key shall be
used for that folder (Select). Note that you may assign several folders with different
keys in one and the same folder encryption policy.
Environment variables in folder paths
It is also possible to type in environment variables in the folder encryption path, these
will then be resolved in the client to fetch the proper folder to encrypt, e.g. if you
write: c:\%user%
as a folder path, then on the client side, the environment variable
%user% is fetched and included when resolving the entire path to the folder to be
encrypted.
Folder should be decrypted
Selecting this option for a folder will remove the indicator that specifies what key
should be used to encrypt files stored in that folder, i.e. new files added to the folder
will not be encrypted. Also, existing files will be decrypted. You will see the key
selection change to <No Key> when selecting this option.
Once you have made your selections for the folder, click OK to see your selection
being added to the folder encryption policy you are creating.
Use default local key
This refers to the user local encryption key that may be generated automatically as
per the policy for user local keys. See the User Local Keys secti
on for addi
tional
details.
Remove
Lets you remove a selected folder encryption item from the list.
NOTE:Removingafolderentryfromthelistoffolderstoencryptdoesnotimplythatthecontentofthat
folderwillbeautomaticallydecrypted.Inordertodecryptafolderlistedasencrypted,youneedtousethe
optionFoldershouldbedecryptedasdescribedabove.