Removable media encryption with DESlock+ by ESET

Removable media encryption with DESlock+ by ESET


Welcome to this DESlock+ encryption
instructional video. In this section you will learn how removable
media encryption works in DESlock+. First, go to the workstation policy to
check that the removable media machine policy is set to blocked. Then, switch to group policy to check that the removable media
access mode is configured to forced choice, which
means that the user will have the option to choose whether to encrypt the USB
fully or only partially. Another option is the read-all/write encrypted mode
which means that the user will have read-only access to an unencrypted USB drive, but still
have full rights to the USB needed to encrypt the drive. Because we made changes to the group
policy, we also need to post policy updates to the user. With the USB drive connected but logged out from DESlock+,
the user has no access to the USB. As soon as the user logs into DESlock+,
the USB drive becomes available. However, since the drive is not encrypted
yet, the user has read-only access to this
USB. To encrypt the drive, right-click the
DESlock+ taskbar icon, select removable
media and removable media encryption.Select
the drive and click the encrypt button. The user now
has the option to choose to encrypt the entire storage device, including any existing files or to
create one encrypted area on the disk. When any of these options are selected,
the user is asked to select which encryption key to use to encrypt the drive. When drive encryption is finished, a
small encryption indicator icon is added next to the drive icon to symbolize that the drive is now
encrypted. When we open the drive, we see the
encrypted folder, which was created by DESlock+
because we chose partial encryption only. Anything put inside this folder will be
encrypted automatically. The rest of the USB is still not
encrypted, preventing us from putting anything on this unencrypted part of the USB. Logging out of DESlock+
immediately makes the drive inaccessible again. That’s it – we hope you
found these instructions helpful.

Leave a Reply

Your email address will not be published. Required fields are marked *