Removable Media Encryption allows encryption of removable devices such as USB memory sticks/flash drives
or USB Hard Disks.
Unmanaged users
Encryption Methods
There are two encryption methods of removable media, which gives maximum flexibility on how the
removable media is used.
Full Disk
With this method the entire memory device is encrypted. The benefit is that any existing data on the device is
automatically encrypted, and the device is completely unusable on a system without DESlock+, or without the
correct encryption key available. All data added to the device is automatically encrypted and decrypted when
removed.
File
With this method, the memory on the device is divided into two distinct encrypted and non encrypted areas.
Any data that already exists on the device while it is being encrypted will remain decrypted. Once the
encryption process has been completed, any data added to the encrypted section of the device will be
automatically encrypted and decrypted when removed. The remainder of the device may be used as normal.
During the encryption process DESlock+ Go may be selected for use on that removable device. DESlock+ Go is
only available for removable devices encrypted in File Mode.
Managed users
In a managed environment, workstation policy can be used to restrict or control access to non-encrypted
memory devices. Policy can be set to; Open (any removable media device is allowed), Blocked (access to
removable devices is blocked) or Read Only (where the devices can be read but not written to). This is set
within the DESlock+ Enterprise Server and is controlled by the Enterprise Server administrators.
On an unmanaged system, when logged into DESlock+, Key-File policy controls access. If the removable media
device is not currently encrypted, the user may be prompted to encrypt the device if required. In a managed
environment, this choice may be forced upon the user by system policy.
As with any other DESlock+ feature, encryption and decryption functions will only be performed if DESlock+ is
installed and the user is logged in.
One important exception to this is DESlock+ Go, where Licenced DESlock+ users can allow access to encrypted
data on removable devices to selected persons through the use of passwords. Data will be accessible if the
password is known and DESlock+ Go is used, or if DESlock+ is installed and the correct encryption key is held.
On a managed system, the use of DESlock+ Go is controlled by the administrator and is determined by the
policy set.
4.11.2 Encrypting Optical Media
Optical Media Encryption allows the creation of encrypted CD, DVD or BluRay discs.
You can access Optical Media Encryption by right-clicking on the DESlock+ Icon Notifications Area (also
known as the System Tray) and selecting 'Optical Media Encryption', this will then launch the wizard which
will guide you through the process. If you are sending encrypted Optical Media to a recipient that does not
have DESlock+ installed, the DESlock+ Go utility can be utilised.
During the encryption process DESlock+ Go may be selected requiring a password, allowing the optical media
to be accessed on a system without the DESlock+ software.
Manual
View the manual for the ESET DESlock+ Standard here, for free. This manual comes under the category antivirus software and has been rated by 1 people with an average of a 5.2. This manual is available in the following languages: English. Do you have a question about the ESET DESlock+ Standard or do you need help? Ask your question here
Need help?
Do you have a question about the ESET and is the answer not in the manual?
Question and answer
Number of questions: 0