CREDANT Knowledge Base

How to View Encryption or Decryption Progress

bwenrick — Wed, 01 Sep 2010 19:56:29 GMT

Summary

This article provides instructions on how to view encryption or decryption progress. As the owner of encrypted information, you will always be able to access it in unencrypted form, but unauthorized users will not. For complete information about any current encryption or decryption, you can view the encryption progress dialog.

Caution: When either encryption or decryption is occurring, as is good Windows practice any time an application is writing to disk, do not power off your computer without shutting down properly. Powering off without shutting down could cause data corruption in the small number of files the Dell Edition Windows Shield is currently working with.

Applies To

Dell Edition Windows Shield.

Solution

The Dell Edition Windows Shield encrypts and decrypts data as you work with it. If you access a file at the same time encryption or decryption is occurring, a pop-up displays, notifying you that the Shield is processing the file. Click Cancel to end the process or wait for Dell Edition Windows Shield to release the file in a few seconds.

Right-click the CREDANT icon in the system tray and select Show Encryption Dialog. If encryption or decryption activity is in progress, the encryption progress dialog displays. Otherwise, the dialog displays the next time encryption or decryption occurs.

For additional assistance, contact CREDANT Support by email at delledition@credant.com. To speak to a support representative, call 888-359-3608.

Keywords

encrypt, decrypt, encryption, decryption, contact support, support, contact

About Windows Hardware and Software Support for Dell Edition Windows Shield

bwenrick — Thu, 06 May 2010 00:06:43 GMT

Summary

This article lists the hardware and software supported by Dell Edition Windows Shield.

Applies To

Dell Edition Windows Shield.

Solution

Supported Windows hardware:
- Intel Pentium-class processor
- 512 MB RAM
- 80 MB of free disk space (37 MB footprint)

Supported Windows softare:
The Dell Edition Windows Shield supports 32- and 64-bit operating systems.
- Microsoft Windows XP Professional SP3
- Microsoft Windows XP Tablet PC Edition SP3
- Microsoft Windows Vista and Microsoft Windows Vista SP1 and SP2 (Enterprise Edition, Ultimate Edition, Business Edition)
- Microsoft Windows 7 (Professional and Ultimate)

IMPORTANT: If you intend to upgrade your operating system, it is required to remove Dell Edition Windows Shield software (which triggers the decryption process) prior to upgrading. It is important that your computer is fully decrypted prior to operating system upgrade. Once the operating system upgrade is complete, re-install Dell Edition Windows Shield and proceed with re-encryption.

Microsoft states that Vista operating systems may be upgraded to Windows 7, and that Windows XP must first be upgraded to Vista prior to upgrading to Windows 7 or by using the migration tool, which is provided by Microsoft.

For additional assistance, contact CREDANT Support by email at delledition@credant.com. To speak to a support representative, call 888-359-3608.

Keywords

Intel, pentium, hardware, software, Windows, XP, Vista, Windows 7, contact support, support, contact

Error Message: Unable to connect with the activation server, please contact customer support

bwenrick — Thu, 06 May 2010 00:05:59 GMT

Summary

An error message is encountered when trying to perform initial product activation: “Unable to connect with the activation server, please contact customer support”.

Applies To

New Dell Edition Windows Shield customers.

Solution

Occasionally our activation server will receive a high number of activation requests at the same time, resulting in a connection failure error. Most customers are able to resolve this by simply re-running the activation procedure, but on rare occasions a third attempt may be required.

If you have tried multiple times to activate and still receive the message, contact CREDANT Support byemail at delledition@credant.com. To speak to a support representative,call 888-359-3608.

Keywords

error message, error, activation, activation error

CREDANT® Mobile Guardian Dell™ Edition Windows Shield v6.7 Release Notes

bwenrick — Thu, 25 Feb 2010 08:43:02 GMT

Download Information

The Release Notes provide information about features and changes in each major release, supported platforms, any known issues in the release, and software/hardware compatibility issues.

Applies To

CREDANT® Mobile Guardian Dell™ Edition Windows Shield customers

CREDANT® Mobile Guardian Dell™ Edition Windows Shield v6.7 Installation Guide

bwenrick — Thu, 25 Feb 2010 08:34:08 GMT

Download Information

The CREDANT^® Mobile Guardian Dell^TM EditionWindows Shield Installation Guide provides the information needed toinstall the Dell^TM Edition Windows Shield.

Applies To

CREDANT^® Mobile Guardian Dell^TM EditionWindows Shield customers

How to Define Volumes to Encrypt

mlacy — Tue, 09 Feb 2010 03:05:34 GMT

Summary

This article provides instructions on how to define Volumes to Encrypt.

Applies To

Dell Edition Windows Shield

Solution

The Dell default factory installation encrypts all volumes on the computer. Follow this process to modify the installation to only encrypt the system volume (typically C:).

1. Double-click setup.exe, which is located in your installation media. Click Next.
2. Read the license agreement, select the I Accept option, and click Next.
3. Click Next and then select Change….
4. Select the Custom installation type and click Next. The Custom option allows selection of system volume encryption only (typically C:).
5. Click Next to select system volume only.
6. Select Encrypt system volume only, then click Next.
7. Click Install to begin the installation. Dell Edition Windows Shield is now installed.
8. Click Finish to exit the wizard.

To change your Dell Edition Windows Shield to encrypt only the system volume (typically C:), obtain the installation media from CREDANT support and follow Custom Installation instructions located in the Dell Edition Windows Shield Installation Guide.

For additional assistance, contact CREDANT Support by email at delledition@credant.com. To speak to a support representative, call 888-359-3608.

Keywords

encrypt, volumes, contact support, support, contact

About CMG Decryption Agent

mlacy — Tue, 09 Feb 2010 02:34:38 GMT

Summary

This article describes the CMG Decryption Agent.

Applies To

Dell Edition Windows Shield.

Solution

Encrypted files are decrypted using CMG Decryption Agent during the process of removing Dell Edition Windows Shield.

CMG Decryption Agent Logging
Logging can be enabled by creating the following Windows Registry entry:

HKLM\Software\Credant\CMGDecryptionAgentLogLevel=dword:00000002
LogLevel 0 - no logging
LogLevel 1 - logs errors that prevent the Service from running
LogLevel 2 - logs errors that prevent the data from being totally decrypted (recommended logging level)
LogLevel 3 - logs information about all volumes and files being decrypted
LogLevel 5 - logs debugging information

The log file pathname is Documents and Settings\All Users\Application Data\CMGDecryptionAgent.

CMG Decryption Agent Status
When CMG Decryption Agent runs, its status is displayed in the description of the Service Control Panel as follows.

Waiting for SDE Deactivation – The Dell Edition Windows Shield is still installed, the Shield service is still configured, or both. Until Dell Edition
Windows Shield is removed, decryption will not start.
Initial sweep – The service is making an initial sweep, calculating the number of files and bytes that are SDE-encrypted. This is performed once.
Decryption sweep – The service is decrypting files and possibly requesting to decrypt locked files.
Decrypt on Reboot (partial) – The decryption sweep is complete and some locked files (but not all) are to be decrypted on the next reboot.
Decrypt on Reboot – The decryption sweep is complete and all locked files are to be decrypted on the next reboot.
All files could not be decrypted – The decryption sweep is complete, but all files could not be decrypted. If this status is displayed it could
mean one of the following:
   - Locked files could not be scheduled to be decrypted because they were too big, or an error occurred making the request to unlock them.
   - Input/Output Error while decrypting files.
   - Files could not be decrypted by policy.
   - Files marked as should be encrypted.
   - Non-SDE encrypted files. The service only decrypts SDE-encrypted files.
   - An error occurred while doing the decryption sweep.
     In all of these cases, a log message will be sent to the log file if LogLevel=2 (or higher) is configured. To debug this, set the log level to 2,
     then restart the CMG Decryption Agent service to force it to make another decryption sweep.
Complete – The decryption sweep is complete, the service, the executable, the CEF driver, and the CEF driver executable are all scheduled
  to be deleted on the next reboot.

For additional assistance, contact CREDANT Support by email at delledition@credant.com. To speak to a support representative, call 888-359-3608.

Keywords

encrypt, decrypt, sweep, logs, logging, contact support, support, contact

About Encryption Policies

mlacy — Tue, 09 Feb 2010 02:25:32 GMT

Summary

This article describes Encryption Policies.

Applies To

Dell Edition Windows Shield.

Solution

The Dell Edition Windows Shield uses encryption policies to protect your files. For your computer's security, these policies cannot be changed.
The Dell Edition Windows Shield encrypts Windows Virtual Memory, which is used to store information from RAM that is not immediately needed by the operating system, the password storage areas of Windows, and all system data files on the Windows operating system, except those that are required for the computer to boot up.

Encrypting data does not restrict your ability to view, create, change, rename, copy, move, share, or delete files and folders as usual. Deleted encrypted files and folders remain encrypted, whether they are in the Recycle Bin or permanently deleted.

For additional assistance, contact CREDANT Support by email at delledition@credant.com. To speak to a support representative, call 888-359-3608.

Keywords

encryption, policies, contact support, support, contact

How To Ensure When Windows Credentials Become Fully Protected

mlacy — Tue, 09 Feb 2010 02:18:42 GMT

Summary

This article explains at what point during the Windows Shield installation and startup that the Windows credentials become fully protected in accordance with the Secure Windows Credentials policy.

Applies To

Dell Edition Windows Shield.

Solution

When the Shield is initially activated and encryption keys have been exported and archived, it starts an encryption sweep. When the sweep finishes, the Shield prompts the user to restart (reboot) the computer. The Windows credentials are not fully protected until the post-sweep reboot completes.

The post-sweep reboot is essential because the registry is in use, and cannot be encrypted until reboot. If, for example, an attacker were to have unrestricted access to a computer after its encryption sweep has completed, but before it has been allowed to reboot, then the password storage areas of Windows would not yet be encrypted, and would therefore be vulnerable.

For additional assistance, contact CREDANT Support by email at delledition@credant.com. To speak to a support representative, call 888-359-3608.

Keywords

activated, encryption, exported, archived, protected, contact support, support, contact

How to View Encryption Policies

mlacy — Mon, 08 Feb 2010 22:35:22 GMT

Summary

This article provides instructions on how to view encryption policies.

Applies To

Dell Edition Windows Shield

Solution

Right-click the CREDANT icon in the system tray and select Security Policies. The following policies are enabled in the Dell Edition Windows Shield:
- Encrypt Windows Paging File - Encrypts Windows Virtual Memory, which is used to store information from RAM that is not immediately needed by the operating system.
- Secure Windows Credentials - Encrypts the password storage areas of Windows.
- SDE Encryption Enabled - Enables encryption on your computer.
- SDE Encryption Algorithm (AES256) - Encryption algorithm used.
- SDE Encryption Rules - A list of rules to be used to encrypt/not encrypt certain drives, directories, and folders.
- Number of Reboot Delays Allowed - The number of times you may delay a reboot after the initial encryption sweep finishes (3 times).
- Length of Each Reboot Delay - The amount of time between prompts to reboot (15 minutes each time).
- Force Reboot on Update - Causes the computer to reboot after the initial encryption sweep finishes (although you can delay 3 times)

For additional assistance, contact CREDANT Support by email at delledition@credant.com. To speak to a support representative, call 888-359-3608.

Keywords

encrypt, encryption, policies, contact support, support, contact

How to Use Windows Shield Scanning Utility (WSScan)

mlacy — Mon, 08 Feb 2010 22:13:30 GMT

Summary

This article provides instructions on how to use Windows Shield Scanning Utility (WSScan). Use the Dell Edition Windows Shield Scanning Utility (WSScan) to scan any computer, whether Shielded or not, for Shield-encrypted or unencrypted files, to get information, or verify that files are being encrypted as you intended. The utility can be located in the Utilities folder of the installation media. We recommend you log in to the computer with administrator privileges. This is not required, but WSScan may not be able to find all encrypted files without administrator privileges.

Applies To

Dell Edition Windows Shield.

Solution

1. From the Utilities folder of the installation media, copy WSScan.exe to the desktop (or another location) of the computer to scan.
2. Double-click WSScan.exe.
3. Click Advanced.
4. From the drop-down box, select the type of drive to scan: All Drives, Fixed Drives, Removable Drives, or CDROMs/DVDROMs.
    or
   To only scan a particular folder, go to Scan Settings and enter the folder path in the Search Path field. If this field is used, the selection in the drop-down box will be ignored.
5. If you do not want to write WSScan output to a file, clear the Output to File check box.
6. If desired, change the default path and filename in Path.
7. If you do not want to overwrite any existing WSScan output files, select Add to Existing File.
8. Choose your output format as follows:
    - For the message-style output that displays in the WSScan Utility dialog, select Report Format.
    - For a delimited output file containing information about encrypted files only that you can import using a spreadsheet application, select Value Delimited File. Enter the keyboard characters you
      want used to delimit your output in Delimiter. You can specify up to 9 alphanumeric, space, or keyboard punctuation characters. To enclose each value in double quotation marks, select the
      Quoted Values check box.
    - If you want a non-delimited output file containing a continuous line of fixed-length information about each encrypted file (a 10-character date, 8-character time, single-character encryption type,
      8-character DCID, 8-character UCID, 260-character file path), select Fixed Width File.
9. Click Search. To stop your search, click Stop Searching. To clear displayed messages, click Clear.

Dell Edition Windows Shield is removed from your computer and the decryption process is in progress. The decryption process could take several hours, depending on the number of volumes being decrypted and the amount of data on those volumes.

For additional assistance, contact CREDANT Support by email at delledition@credant.com. To speak to a support representative, call 888-359-3608.

Keywords

shield, scan, utility, encrypt, contact support, support, contact

How to Remove Dell Edition Windows Shield

mlacy — Mon, 08 Feb 2010 13:11:58 GMT

Summary

This article provides instructions on how to remove Dell Edition Windows Shield. Dell Edition Windows Shield can be removed using the Add or Remove Programs option in the Control Panel or by running setup.exe. Encrypted files are decrypted during the process of removing Dell Edition Windows Shield, using CMG Decryption Agent. For additional details about CMG Decryption Agent, see the Dell Edition Windows Shield Installation Guide.

Best Practices
• Back up all data.
• Run the Windows Disk Cleanup Wizard to remove temporary files and any other unnecessary data. This step reduces decryption time.
• Plan to decrypt overnight, if possible.
• Turn off sleep mode. If sleep mode is not turned off, an unattended machine will sleep and the decryption process will not continue overnight.
• Ensure that you have the correct version of the setup.exe file. Use the same version to remove the software as was used to install.
• Shut down all processes and applications to minimize decryption failures because of locked files.
• Before performing a reboot, run WSScan.exe to ensure that all data is decrypted (see the Dell Edition Installation Guide for instructions).
• Periodically check the CMG Decryption Agent service. If the Decryption Agent service exists, then data decryption is still in process. For additional details about CMG Decryption Agent, see the Dell Edition Installation Guide.

Applies To

Dell Edition Windows Shield

Solution

Remove Using Add or Remove Programs
1. To remove Dell Edition Windows Shield using Add/Remove Programs, navigate to the Windows Control Panel (Start > Control Panel).
2. Double click Add or Remove Programs.
3. Highlight CREDANT Mobile Guardian Dell Edition Windows Shield and click Remove (or Unininstall, depending on your operating system version).

The entry for Dell Edition Windows Shield is no longer displayed in the currently installed programs list in Add or Remove Programs. You may now close the Add or Remove Programs window. As part of the software removal process, CMG Decryption Agent detects and decrypts files that are encrypted. The decryption process could take several hours, depending on the number of volumes being decrypted and the amount of data on those volumes.

Remove Using User Interface
1. When the program launches, read the screen and click Next.
2. Select Remove, then click Next.
3. When the CMG Decryption Agent Installation screen displays, select Install CMG Decryption Agent, then click Next. As part of the software removal process, CMG Decryption Agent detects and decrypts files that are encrypted. If you choose not to install CMG Decryption Agent, encrypted files will not be decrypted. All components of Dell Edition Windows Shield will be left on your system to allow the encrypted files to remain accessible.
4. Click Remove to complete the removal process.

Dell Edition Windows Shield is removed from your computer and the decryption process is in progress. The decryption process could take several hours, depending on the number of volumes being decrypted and the amount of data on those volumes.

For additional assistance, contact CREDANT Support by email at delledition@credant.com. To speak to a support representative, call 888-359-3608.

Keywords

add/remove, programs, user, interface, contact support, support, contact

How to Recover Encryption Keys

mlacy — Mon, 08 Feb 2010 12:56:11 GMT

Summary

This article provides instructions on how to recover archived encryption keys.

Applies To

Dell Edition Windows Shield

Solution

To recover archived encryption keys, follow these steps:

1. On the computer that you wish to recover your encryption keys, insert the removable drive or access the network drive/network share where the recovery application is stored. The recovery application was created when you exported and archived your encryption keys.

2. Double-click the executable recovery file. Ensure that the system name included in the recovery file name matches the name of the system to which you are recovering the keys. If you changed the recovery file name when you exported the encryption keys after activation, ensure that you use the recovery file that corresponds with the computer. You will not be able to access the computer's encrypted data until you recover the keys that are associated with the computer. Recovering the wrong keys to a computer will not harm the computer; however, you will not be able to access the computer's encrypted data until you recover the correct keys to the computer.

3. Read the SDE Key Recovery Wizard screen, then click Next.

4. At the password screen, enter the password you set when you exported your encryption keys, then click Next.

5. At the drive selection screen, select the drive to which you want to recover encryption key material, then click Next. Dell Edition Windows Shield validates the password and checks the destination folder the encryption keys will be restored to. If a file with the same name exists in the destination folder, you must confirm that you want to overwrite it or click No. Move or rename the existing file and continue with this step.

6. Click Finish when the restore process is complete. Access to data is now restored.

For additional assistance, contact CREDANT Support by email at delledition@credant.com. To speak to a support representative, call 888-359-3608.

Keywords

recover, archive, keys, activating, contact support, support, contact

How to Export and Archive Encryption Keys

mlacy — Mon, 08 Feb 2010 12:23:22 GMT

Summary

This article provides instructions on how to export and archive encryption keys. This process is also performed when initially activating the Dell Edition Windows Shield, so your encryption keys have already been exported and archived at least once.

Applies To

Dell Edition Windows Shield

Solution

To export your encryption keys, follow these steps:

1. Right-click the CREDANT icon in the system tray and select Export SDE keys....

2. Read the System Data Encryption (SDE) Keys Export Wizard welcome screen, then click Next.

3. At the Enter a password for the recovery file screen, enter a password, destination, and name for the recovery file. The password must be at least 8 characters in length and include at least one alphabetic and one numeric character. You must export the recovery application to a location other than a local drive, such as a removable drive a network drive, or a network share.

CAUTION: You must remember this password in order to access encrypted data in case recovery is ever needed. Without the password, you cannot recover encrypted data. Save this recovery file in a safe place. Anyone with access to the file and password can also access your encrypted data.

4. Click Next. The Dell Edition Windows Shield validates the password, file destination, and name. If a file exists in the same location that you have chosen to export your encryption keys, you must confirm that you want to overwrite it or click No, then choose a different destination or name for the recovery file. The default recovery file name includes the computer name to help you identify which computer the encryption key recovery file belongs to. If you change the default recovery file name, record the recovery file name you select, along with the computer that is associated with it, in order to make locating the correct recovery file easier, if recovery becomes necessary in the future.

5. Click Finish when the export process is complete.

For additional assistance, contact CREDANT Support by email at delledition@credant.com. To speak to a support representative, call 888-359-3608.

Keywords

export, archive, keys, activating, contact support, support, contact

How to Encrypt a File to Share with CREDANT2go

mlacy — Mon, 08 Feb 2010 11:55:00 GMT

Summary

This article provides instructions on how to encrypt a file to share with CREDANT2go. CREDANT2go is installed by default with Dell Edition Windows Shield. You can use CREDANT2go to create a password-protected, compressed, encrypted, and self-extracting archive of one or more files. You can then:

- Email the archive
- Place the archive on removable media
- Transfer the archive to another computer

Anyone who knows the password can then open and decrypt the archive on any computer, whether or not Dell Edition Windows Shield is installed.

Applies To

Dell Edition Windows Shield

Solution
1. Select one or more files or folders to encrypt.
2. Right-click the selected items, and click Send To > CREDANT2go.
3. Now you can do any of the following:
    - To add files or folders, drag and drop them on the dialog.
    - To add files, click Add files, select one or more files to add, and click Open.
    - To add folders, click Add folders, select one or more folders to add, and click Open.
    - To remove one or more files or folders, select the items you want to remove, and click Remove.
4.Click Next when you have all the files and folders you want to encrypt ready.
5. Enter a Password that is at least 8 characters long with at least one alpha and one numeric character, and confirm the password. You can also enter a Password Hint.
6. Click Next. If you have not entered a password hint, you are prompted to confirm this choice.
7. Click Yes to continue. Click No to go back and enter a hint.
8. Click Browse to select a location for your archive. You can either enter a new file name, or select an existing file to overwrite. You must specify or select a filename with an .exe file extension (for example, encrypted.exe).
9.   Click Open, and then click Finish.

Note: When encrypting an .exe file (such as encrypted.exe), save the archive with an extension other than .exe (such as encrypted.txt) and extract the file to an alternate location if the .exe already exists.

For additional assistance, contact CREDANT Support by email at delledition@credant.com. To speak to a support representative, call 888-359-3608.

Keywords

encrypt, CREDANT2go, contact support, support, contact

How to Activate Dell Edition Windows Shield

mlacy — Mon, 08 Feb 2010 05:58:35 GMT

Summary

This article provides instructions on how to activate Dell Edition Windows Shield.

Applies To

Dell Edition Windows Shield

Solution

To activate the Dell Edition Windows Shield:
1. Double-click the CREDANT Shield Activation icon, located on your desktop.
2. Read the Welcome screen, then click Next.
3. Read the license agreement, select the I accept option, then click Next.
4. Enter your name and email address, then click Next. Note that all fields are required.
5. Click Finish once activation is complete.
6. Export and archive your newly created encryption keys. This export and archive process is required before encryption can begin.

For additional assistance, contact CREDANT Support by email at delledition@credant.com. To speak to a support representative, call 888-359-3608.

Keywords

activate, encryption, contact support, support, contact

How to Change Encryption Scan Priority

mlacy — Mon, 08 Feb 2010 05:57:46 GMT

Summary

This article provides instructions on how to change Encryption Scan Priority.

Applies To

Dell Edition Windows Shield

Solution

If you notice that scanning affects your computer responsiveness, or if you want the scan to complete faster, you can change the priority of the scan.
1. Right-click the CREDANT icon in the system tray and select Encryption Scan Priority.
2. Do one of the following:
   -Click High or Highest to complete the scan faster.
   -Click Low or Lowest to improve computer responsiveness.
   -Click Normal to balance scanning speed and computer responsiveness.

For additional assistance, contact CREDANT Support by email at delledition@credant.com. To speak to a support representative, call 888-359-3608.

Keywords

activate, encryption, scan, contact support, support, contact

How To Find the Version Number of the Dell Edition Windows Shield

bwenrick — Wed, 03 Feb 2010 10:52:53 GMT

Summary

This article provides instructions on how to find the version number for Dell Edition Windows Shield.

Applies To

Dell Edition Windows Shield

Solution

You can find version information about this release of Dell Edition Windows Shield in the About box. Right-click the Dell Edition Windows Shield icon in the system tray and click About....

Keywords

about, version

How To Contact CREDANT Support

bwenrick — Wed, 03 Feb 2010 10:49:24 GMT

Summary

This article provides instructions on how to contact CREDANT Support.

Applies To

Dell Edition Windows Shield

Solution

Contact CREDANT Support by email at delledition@credant.com. To speak to a support representative, call 888-359-3608.

Keywords

contact support, support, contact