Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 14 replies
  • Subscribers 6 subscribers
  • Views 25899 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to add group key to endpoint?

Terri Cooper

 Hello,

We are going to deploy Safeguard Encryption v8 similar to https://community.sophos.com/products/safeguard-encryption/f/sophos-safeguard-products/90932/green-horn-i-want-to-set-up-file-encryption-only-for-specific-location-on-network-share-for-test-virtual-pc-to-start-then-my-dept-full-ou-on-ad.  We are going to use another program to search for sensitive data, then quarantine the files to network shares that are encrypted with File Encryption.  The file server has a separate folder for each department and security is set up through AD Security Groups.  I just discovered that you can't apply a policy to a group, so I'd like to apply a File Encryption policy for each department to the security groups OU.  I'd also like to use the group key in each department's configuration package for added security.  But when I go to Users and Computers>Key tab, I don't see a way to export the key.  I'm not sure how to get the key onto the endpoint.  I'm not sure if I'm using the keys like they're supposed to be used, since I'm new to encryption/keys.

Any help would be appreciated.  

Terri



This thread was automatically locked due to age.
Parents
  • 0

    I have figured this out and am in the process of testing security.  Just wanted to share in case someone else needs to do it.  I was able to create a key for the AD security group, then use that key to create encryption settings and file encryption policies, which I combined as a group.  Then I applied the group to both the parent OU of the AD group and the Root in SGN.  I'm not sure why, but the policy wouldn't apply until I added it to Root.  So far it's working as expected, but, like I said, we're still testing the security rights for the groups.

    Terri

  • 0 in reply to Terri Cooper

    Hi Terri,

    Thank you for sharing the workaround. As you are going through the testing process, please feel free to get in touch with us in case you need any assistance. 

    Haridoss Sreenivasan
    Technical Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

Reply Children
Unfiltered HTML