Specifications

Utilities for Endpoint Encryption for Files and Folders
| 89
• Communication between the Endpoint Encryption for Files and Folders client
and the database
• Tokens problems
• Key retrieval from database and key loading
• Send the log file to your McAfee representative for further analysis.
Kernel and User traces
Description
This utility contains two logging functions, tracing what happens in the User Mode and
the Driver component of Endpoint Encryption for Files and Folders respectively. The
utility logs all the activities in each component such that it detect what happens at a
certain occasions, e.g. if a module malfunctions.
As the Endpoint Encryption for Files and Folders driver is extensively involved in all file
I/O transactions of the client system, the Kernel trace log grows large very quickly.
Thus, before using the Kernel Tracing mode, the problem being traced must be as
close as possible to 100% reproducible. Then activate the Kernel Tracing, as per the
instructions below; try to reproduce the problem immediately and then disable Kernel
Tracing as soon as the problem has been reproduced.
The User Mode trace file does not grow as fast as the Kernel tracing, yet the same
procedure as for Kernel tracing should be followed in order to keep all logs as small as
possible, therefore reducing the amount of trace information not related to the issue
being reproduced.
The utility creates one log for Kernel tracing and one for User Mode tracing, depending
on what tracing is enabled (see steps below). Any trace file being generated should be
sent to your McAfee representative for further analysis.
Where to find it
This utility is built into the Endpoint Encryption for Files and Folders client. Hence, it
comes as a part of any deployed client.
Instructions
To create a coreTrace log, you should use the SbCeShell.com (command line version)
or SbCeShell.exe (Windows version) utility in the CE 3 [Program Files] directory.
To enable tracing, run the following commands from a command prompt when in the
CE 3 [Program Files] directory on the client:
1. SbCeShell -enable_user_mode_trace