CDP allows to set encryption on the Disk Safe. Follow the instructions below to manage the encryption.
{info:title=Reference: AES-256 Encryption}Advanced Encryption Standard (AES) is a algorithm for the encryption of electronic data. AES-256 encryption/decryption, Federal Information Processing Standards (FIPS) certified, protects data from unauthorized use. The design and strength of all key lengths of the 256-bit-key AES is sufficient to protect classified information up to the top secret level. {info}
{info:title=Note}Once you have configured the encryption during Disk Safe creating, you cannot turn it on/off. For enabled encryption the pass phrase can be changed.
{info}
1. Create a new Disk Safe with enabled encryption. See [CDP3:Creating Disk Safes].
!pas3.png!
If you want to change encryption options for already created Disk SAfe, then go to the "Disk Safes" list and click "Edit" to access the properties of a Disk Safe.
!pas4.png!
2. Switch to the "Data Settings" tab.
!pas5.png!
3. You will see the Encryption Management options.
!pas6.png!
The following options are available:
* *Send Key to Agent* \- Allows to download the Disk Safe encryption key to the Agent, to which the Disk Safe is assigned.
* *Download Key* \- Allows to download the Disk Safe encryption key to the selected location.
* *Recover Lost Passphrase* \- Allows to recover the passphrase using the downloaded encryption key.
* *Change passphrase* \- Allows to set a new passphrase.
----
{toc:location=top|maxLevel=3|minLevel=3|type=flat|separator=pipe|style=border:1}
----
h3. Downloading the Disk Safe Encryption Key
1. To download the key to the Agent, click "Send Key to Agent" button.
!pas11.png!
Alternatively, click "Download" to save it to your computer.
!pas9.png!
2. You will be prompted for a passphrase. Enter the phrase and click "OK."
!pass-palevo.png!
The key will be sent to the Agent or downloaded to your computer.
----
h3. Changing the Passphrase
1. Click "Change Passphrase."
!pas12.png!
2. Input the current and new passphrases and click "Change Passphrase."
!pas2.png!
----
h3. Recovering the Lost Passphrase
This option allows to set a new passphrase using the previously downloaded Disk Safe encryption key (see instructions above.)
1. Click on "Recover Lost Passphrase."
!pas13.png!
2. Click "Upload Key."
!pas14.png!
3. Click "Browse" and specify the path to the encryption key.
!pas15.png!
4. The key will be displayed. Click "Upload."
!pas16.png!
5. After you have uploaded the key, the indicator will turn green. Input the new passphrase and click "Recover Lost Passphrase."
!pas17.png!
You can also manage Disk Safes encryption using the "Disk Safes" tab of the Agent "Details" Pane. This screen provides the same functionality as the main "Disk Safes" screen. See more information in [CDP3:Accessing Agents].
{excerpt:hidden=true}Instructions on how to manage the Disk Safe encryption.{excerpt}
{info:title=Reference: AES-256 Encryption}Advanced Encryption Standard (AES) is a algorithm for the encryption of electronic data. AES-256 encryption/decryption, Federal Information Processing Standards (FIPS) certified, protects data from unauthorized use. The design and strength of all key lengths of the 256-bit-key AES is sufficient to protect classified information up to the top secret level. {info}
{info:title=Note}Once you have configured the encryption during Disk Safe creating, you cannot turn it on/off. For enabled encryption the pass phrase can be changed.
{info}
1. Create a new Disk Safe with enabled encryption. See [CDP3:Creating Disk Safes].
!pas3.png!
If you want to change encryption options for already created Disk SAfe, then go to the "Disk Safes" list and click "Edit" to access the properties of a Disk Safe.
!pas4.png!
2. Switch to the "Data Settings" tab.
!pas5.png!
3. You will see the Encryption Management options.
!pas6.png!
The following options are available:
* *Send Key to Agent* \- Allows to download the Disk Safe encryption key to the Agent, to which the Disk Safe is assigned.
* *Download Key* \- Allows to download the Disk Safe encryption key to the selected location.
* *Recover Lost Passphrase* \- Allows to recover the passphrase using the downloaded encryption key.
* *Change passphrase* \- Allows to set a new passphrase.
----
{toc:location=top|maxLevel=3|minLevel=3|type=flat|separator=pipe|style=border:1}
----
h3. Downloading the Disk Safe Encryption Key
1. To download the key to the Agent, click "Send Key to Agent" button.
!pas11.png!
Alternatively, click "Download" to save it to your computer.
!pas9.png!
2. You will be prompted for a passphrase. Enter the phrase and click "OK."
!pass-palevo.png!
The key will be sent to the Agent or downloaded to your computer.
----
h3. Changing the Passphrase
1. Click "Change Passphrase."
!pas12.png!
2. Input the current and new passphrases and click "Change Passphrase."
!pas2.png!
----
h3. Recovering the Lost Passphrase
This option allows to set a new passphrase using the previously downloaded Disk Safe encryption key (see instructions above.)
1. Click on "Recover Lost Passphrase."
!pas13.png!
2. Click "Upload Key."
!pas14.png!
3. Click "Browse" and specify the path to the encryption key.
!pas15.png!
4. The key will be displayed. Click "Upload."
!pas16.png!
5. After you have uploaded the key, the indicator will turn green. Input the new passphrase and click "Recover Lost Passphrase."
!pas17.png!
You can also manage Disk Safes encryption using the "Disk Safes" tab of the Agent "Details" Pane. This screen provides the same functionality as the main "Disk Safes" screen. See more information in [CDP3:Accessing Agents].
{excerpt:hidden=true}Instructions on how to manage the Disk Safe encryption.{excerpt}