Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 - ADMINISTRATION Administration Manual page 93

Allow user specified folders: Select this option to allow users to select which folders on
their computer are encrypted. This is for local folders only; no removable storage devices
nor network drives can be encrypted.
WARNING: Before disabling data encryption, ensure that all data stored in these folders has
been extracted by the user and stored in another location.
Enable encryption for removable storage devices: All data written to removable storage
devices from an endpoint protected by this policy is encrypted. Users with this policy on their
machines are able to read the data; therefore, file sharing via removable storage device within a
policy group is available. Users outside this policy group are not able to read the files encrypted
on the drive, and will only be able to access files within the Password Encrypted Files folder (if
activated) with a provided password.
Enable encryption via user-defined password: This setting gives the user the ability to
store files in a Password Encrypted Files folder on the removable storage device (this
folder will be generated automatically when this setting is applied).
When a user adds files to this folder, the files are encrypted with a password that the user
supplies. The user can then access the files from any device that is not running the
Security client. To decrypt the files, the user needs the ZENworks File Decryption utility
and the encryption password. You must supply this utility to the user; it is not part of the
Security client (see
page 203).
For example, assume that a user is working on encrypted files at work. The user wants to
take the files home to work on them, but the home computer does not have the Security
client installed. The user copies the files to the Password Encrypted Files folder on a USB
thumb drive, takes the files home, then accesses them using the ZENworks File
Decryption utility you provided.
If desired, you can change the default folder name (Password Encrypted Files) to another
name.
Require strong password: This setting forces the user to set a strong password for the
Password Encrypted Files folder. A strong password requires the following:
seven or more characters
at least one of each of the four types of characters:
uppercase letters from A to Z
lowercase letters from a to z
numbers from 0 to 9
at least one special character ~!@#$%^&*()+{}[]:;<>?,./
For example: y9G@wb?
WARNING: Before disabling data encryption, ensure that all data stored on removable
storage devices has been extracted by the user and stored in another location.
Section 9.1, "Using the ZENworks File Decryption Utility," on
Creating and Distributing Security Policies 93