McAfee OFFICE 3.1 Especificaciones descargar pdf (Pagina 84)

Endpoint Encryption for Files and Folders client

84 |

The .cekey file

When encrypting folders, either manually using the Encrypt option or when encrypted

automatically following a centrally defined folder encryption policy, a small file named

.cekey is written to the folder.

This file basically only contains information about what key shall be used to encrypt

the files stored in that particular folder. It contains the KeyID, not the key itself.

The file is protected by the system with the System and Hidden file attributes.

Moreover, the Endpoint Encryption for Files and Folders driver locks the file such that

it cannot be manipulated or deleted. This makes it highly tamper resistant.

If the .cekey file were to be deleted or manipulated, the encryption policy for the

folder hosting the file would be disabled, thus posing a security threat.

As long as Endpoint Encryption for Files and Folders is installed on the client computer,

the .cekey file cannot be manipulated in anyway.

Figure45:EndpointEncryptionforFilesandFolders–the.cekeyfileinencryptedfolders

Some client characteristics

This section outlines characteristics of the Endpoint Encryption for Files and Folders

client that are important for an administrator of the system.

Inaccessible folders

If the user is not assigned to the key used to encrypt a folder, then the user cannot

list (view) the content of that folder as long as Endpoint Encryption for Files and

Folders is installed. If the user is assigned to the key, then it is possible to list the

content of folders encrypted with that key.

This behavior is subject to a policy setting (Require authentication for listing of

encrypted folders) – see the Endpoint Encryption for Files and Folders Policies chapter

for poli

cy detail

1 2 ... 79 80 81 82 83 84 85 86 87 88 89 ... 134 135

Sin comentarios

McAfee OFFICE 3.1 Especificaciones Pagina 84