Reference Guide

Security Management Server Virtual v10.2.10 AdminHelp
259
Manufacturer:SanDisk
Location ID:0x24100000
Current Available (mA):500
Current Required (mA):200
Partition Map Type:MBR (Master Boot Record)
S.M.A.R.T. status:Not Supported
4. The following whitelist rules can be used:
USBVendorName=abc
USBVendorNum=0x02
USBVendorNum=2,USBProductNum=3
USBVendorNum=2,USBProdName=abc
For this example, add the f
ollowing key/pair string to the EMS Device
Whitelist policy, as shown below:
"USBVendorNum=0x0781,USBProductNum=0x05406"
(including quotes)
5. When satisfied with the EMS Device Whitelist rules, save and
commit the policy.
EMS Trust for
Unsupported File
Systems
Ignore
Ignore, Provisioning Rejected, Unshieldable
Specifies how media are handled when formatted by file systems that
are not supported with Encryption External Media.
Restricted user list
for access to
unencrypted media
Dictionary
Users matching this dictionary are restricted from unencrypted media
use.
Example:
<key>AccessUnencryptedMediaRestrictionUsers</key>
<dict>
<key>dsAttrTypeStandard:AuthenticationAuthority</key>
<array>
<string>;Kerberosv5;;[e-mail];domainNa
me.com*</string>
<string>;Kerberosv5;;@domainName.org;domainName.org</string>
</array>
</dict>
Restrict Access to
Unencrypted Media
Full
Full, Read Only, Block
Specify how media encrypted with Encryption External Media is handled
for users matching unencrypted media restriction.
See basic settings
Removable Media Policies that Require Logoff
• Windows Media Encryption
• EMS Scan External Media
• EMS Encryption Algorithm
• EMS Exclude CD/DVD Encryption
• EMS Data Encryption Key
Mac Encryption
Mac Encryption
Policy descriptions also display in tooltips in the Management Console. In this table, master policies are
in bold font.
Policy Default Setting Description
Dell Volume Encryption