This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to add group key to endpoint?

Hello,

We are going to deploy Safeguard Encryption v8 similar to https://community.sophos.com/products/safeguard-encryption/f/sophos-safeguard-products/90932/green-horn-i-want-to-set-up-file-encryption-only-for-specific-location-on-network-share-for-test-virtual-pc-to-start-then-my-dept-full-ou-on-ad. We are going to use another program to search for sensitive data, then quarantine the files to network shares that are encrypted with File Encryption. The file server has a separate folder for each department and security is set up through AD Security Groups. I just discovered that you can't apply a policy to a group, so I'd like to apply a File Encryption policy for each department to the security groups OU. I'd also like to use the group key in each department's configuration package for added security. But when I go to Users and Computers>Key tab, I don't see a way to export the key. I'm not sure how to get the key onto the endpoint. I'm not sure if I'm using the keys like they're supposed to be used, since I'm new to encryption/keys.

Any help would be appreciated.

Terri

This thread was automatically locked due to age.

Parents

0 Terri Cooper over 7 years ago

I have figured this out and am in the process of testing security. Just wanted to share in case someone else needs to do it. I was able to create a key for the AD security group, then use that key to create encryption settings and file encryption policies, which I combined as a group. Then I applied the group to both the parent OU of the AD group and the Root in SGN. I'm not sure why, but the policy wouldn't apply until I added it to Root. So far it's working as expected, but, like I said, we're still testing the security rights for the groups.

Terri
Cancel
Vote Up 0 Vote Down

Cancel
0 Haridoss Sreenivasan over 7 years ago in reply to Terri Cooper

Hi Terri,

Thank you for sharing the workaround. As you are going through the testing process, please feel free to get in touch with us in case you need any assistance.

Haridoss Sreenivasan
Technical Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Terri Cooper over 7 years ago in reply to Haridoss Sreenivasan

I don't think policy assignment and inheritance it working like I need it to. I've got another ticket open because manually created groups aren't working like I need them to, either.
Cancel
Vote Up 0 Vote Down

Cancel
0 Terri Cooper over 7 years ago in reply to Terri Cooper

Not getting a response from support. :(
Cancel
Vote Up 0 Vote Down

Cancel
0 Haridoss Sreenivasan over 7 years ago in reply to Terri Cooper

Hi Terri,

Please share the ticket number via private message. I will look into it and expedite the service.

Haridoss Sreenivasan
Technical Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Terri Cooper over 7 years ago in reply to Haridoss Sreenivasan

The support rep has finally replied. Thanks, though.
Cancel
Vote Up 0 Vote Down

Cancel
0 Haridoss Sreenivasan over 7 years ago in reply to Terri Cooper

Hi Terri,

Thank you for the update. In case you need any assistance in the future, please feel free to get in touch with us.

Haridoss Sreenivasan
Technical Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Terri Cooper over 7 years ago in reply to Haridoss Sreenivasan

He didn't call as scheduled. My ticket number is 7379800. Can you have someone call me today? I'm in the Central US time zone. The time on this post is 5 hours ahead, even though I've set my location in my profile. Thanks.
Cancel
Vote Up 0 Vote Down

Cancel
0 Haridoss Sreenivasan over 7 years ago in reply to Terri Cooper

Hi Terri,

Sorry for the inconvenience, I will look into the ticket and arrange a call back at the earliest. Is there a preferred time that you want me to schedule a callback?

Haridoss Sreenivasan
Technical Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Terri Cooper over 7 years ago in reply to Haridoss Sreenivasan

He just emailed me and said he had a support call go longer than expected. We're scheduling a time for later today. Thank you for your quick response.
Cancel
Vote Up 0 Vote Down

Cancel
0 Haridoss Sreenivasan over 7 years ago in reply to Terri Cooper

Hi Terri,

You are welcome, please feel free to get in touch if you need any further assistance.

Haridoss Sreenivasan
Technical Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Terri Cooper over 7 years ago in reply to Haridoss Sreenivasan

I have a question about the keys that appear on the folders in Windows Explorer or File Explorer in Windows 10. In previous testing, I would see a green, yellow, or red key depending on the state of the encryption policy. Now, I'm not seeing any keys on the folder with my current configuration.

And I'm not seeing keys inside the folder.

But it says that the file is encrypted. About 30 minutes ago, I could right-click the file>Show encryption state, and it would give me the box that showed the key that was used to encrypt the file and the algorithm. Now it gives me this box, which is different.

Are the encryption policies being applied correctly?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Terri Cooper over 7 years ago in reply to Haridoss Sreenivasan

I have a question about the keys that appear on the folders in Windows Explorer or File Explorer in Windows 10. In previous testing, I would see a green, yellow, or red key depending on the state of the encryption policy. Now, I'm not seeing any keys on the folder with my current configuration.

And I'm not seeing keys inside the folder.

But it says that the file is encrypted. About 30 minutes ago, I could right-click the file>Show encryption state, and it would give me the box that showed the key that was used to encrypt the file and the algorithm. Now it gives me this box, which is different.

Are the encryption policies being applied correctly?
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Haridoss Sreenivasan over 7 years ago in reply to Terri Cooper

Hi Terri,

I am afraid you would have to open a support ticket to investigate this issue. Currently, I do not have an idea why the icons are not shown. Please allow me to check on this and update you further.

Haridoss Sreenivasan
Technical Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 7 years ago in reply to Terri Cooper

Hi Terri,

My name's Toby from the Global Escalations Team, I hope you're well.

I suspect what's happened is that the maximum number of overlay icons are already being used, check out the following KB and this will explain the issue and show you how to resolve it:

community.sophos.com/.../108784
Cancel
Vote Up 0 Vote Down

Cancel