Specifications

Endpoint Encryption for Files and Folders Policy Settings
34 |
Edit
Lets you edit a selected folder encryption item from the list, e.g. change encryption
key.
The image below depicts an example configuration for folder encryption, containing
both a local folder as well as network folders with various notations.

Figure14:Folderencryption‐Exampleconfiguration
Considerations on folder encryption
McAfee recommends that you...
• Do not encrypt entire volumes and in particular the system volume. Doing
this may cause deadlocks in the client systems.
• Do not encrypt the [Program Files] directory as it may cause deadlocks in the
client systems.
• Do not assign folder encryption onto removable devices (e.g. a USB-Hard
disk) drive based on the drive letter. As the drive letter assigned to the
removable device very well may change each time the device is attached, and
other drives may be assigned the letter previously assigned to the removable
device, it could lead to unintentional encryption of other devices.
NOTE:Itispossibletohaveasubfoldersetasdecryptedevenif(any)parentfolderissettobeencrypted,
i.e.itispossibletoencrypttheMyDocumentsfolderthroughafolderencryptionpolicyandthenhavethe
subfolderMyVi
deo
decryptedalsothroughapolicy.
Forlarge(>1GB)networkfoldersthatshallbeencrypted,ratherthanhavingthefoldersencryptedthrough
afolderencryptionpolicy,consideramanual(explicit)encryptofthenetworkfolder(s)inadvance,from
onemachinewithEndpointEncryptionforFilesandFoldersdeployed.Seethechapte
ronLarge‐scale
deploymentconsiderationsforadditionaldetails