Safe guard 8 - removable media volume based encryption

Question

I have a test ring setup of safe guard 8 on windows 7 machines and I am doing some testing. 
 I want to do removable media volume based encryption which I have set up and is working correctly. 
 However I also then want to move the USB drives from one machine to another it then fails. 
 I am using the root key to encrypt and both machines have the key but the machine that doesn't encrypt the media is not able to un-encrypt. I must be doing soemthing wrong but I am not sure what it is as surely you can move USB drive between machines in the domain ? 
 Thanks 
 Jon

Haridoss Sreenivasan · Accepted Answer

Hi Jon, 
 I am trying to replicate the configuration in my environment. In the mean time, I understood that Root_Root@SGN is the key used at the moment, this allows only the users assigned with Root key to Encrypt/Decrypt the files. So, what you should do is, to create a key and assign it to the users. This can be achieved either by creating a new key and assigning it to all users or the faster way is to create a container and add the groups/users under that container so that the key created for the new container will be a general key for all the groups/users in that container. Let me know if this helps resolve your query.