Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 6 subscribers
  • Views 6316 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Safeguard 6.x always encrypts USB media

BradGood

As the title says no matter what I do in the policy editor any USB plugged into the computer becomes encrypted. 

I am using volume based encryption and all the laptops are Win7 64bit SSD

I have followed the guides provided in Easy Disable USB , Disable auto. encryption of external USB media and USB encryption.

I have read the guides. The targets in both Data and Device do not have removable Media or anything else other than Local Storage

"For version 5.x/6.x.. . Select the Encryption Policy and change the target for encryption (i.e. remove "Removable Media" as a target)"

I have read this as well "SafeGuard Policy Editor Admin Help manual (ssg_60_h_eng_admin_help.pdf) chapter 13. "Policy Settings" -> 13.8 "Device Protection" for details."

I read about making a whitelist "and then create a device encryption policy that targets only that whitelist.  Create a second policy that targets all removable media, and set it to "No Encryption".  Finally, make sure that the first whitelist-targeted policy has a higher priority than the no-encryption policy." 

Is there not a simple way to say do not encrypt USBs or do I have to make Whitelists as well?

Thank you

Brad G



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi Brad,

    Local Storage as a protection target encompasses everything, including removable media.

    Change the target to Internal Storage to encrypt just the internal drives, or Boot Volumes to encrypt just the primary hard drives of the machines.

    When you expand the target treeview in your encryption policy you'll see what's covered by the selection you choose.

Reply
  • FormerMember
    0 FormerMember

    Hi Brad,

    Local Storage as a protection target encompasses everything, including removable media.

    Change the target to Internal Storage to encrypt just the internal drives, or Boot Volumes to encrypt just the primary hard drives of the machines.

    When you expand the target treeview in your encryption policy you'll see what's covered by the selection you choose.

Children
Unfiltered HTML