to download - Secure Support - SafeNet

Chapter 4AdministrationBacking Up FilesEncrypted data on a disk commonly needs to be backed up. When using automatedtools to perform backup operations, it would be inefficient for you to disableProtectFile and then re-enable ProtectFile after the backup is completed. ProtectFileoffers a feature called Encrypted Access, which allows you to designate whichapplications will always be presented with encrypted data in a domain, regardlessof whether you are logged into ProtectFile or not. Backups made with the help ofthis feature ensure sensitive data can not be read by an unauthorized person after itis moved onto a tape or other archival format.To give an application encrypted access:1. From the Windows Start menu, select Run.2. Type regedit.exe and press Enter.3. Use the tree on the left to navigate to the registry keyHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ProtectF\Parameters.4. Right-click on the EncryptedAccess value and select Modify.5. Type the executable file name of the application that you want to haveencrypted access (for example, backup.exe).6. Click OK.7. From the Registry menu, select Exit to close the Registry Editor.8. Restart your computer for the changes to take effect.NOTEAdding an executable filename to the encrypted access list means that allapplications with that executable filename will only be able to read data in encryptedform from domains.To decrypt data that has been backed up separate from the domain, you must ensurethat the envelope.sys file is backed up as well. Without the envelope.sys file, datarecovery is not possible.NOTEWindows Vista only: Do not use the standard Vista Backup and Restore Center tobackup and restore ProtectFile envelope.sys files, as encrypted files will be filtered out(skipped). Use an alternate backup/restore utility to avoid possible data corruption.36 © SafeNet, Inc.