Deployment Guide

Configuration Guide 21

Configure Encryption Features

This section explains how to independently control encryption features.

Prevent Temporary File Deletion

By default, all temporary files in the c:\windows\temp directory are automatically deleted during DDPE

installation/upgrade. Deletion of temporary files speeds initial encryption and occurs before the initial encryption sweep.

However, if your organization uses a third-party application that requires the file structure within the \temp directory to be

preserved, you should prevent this deletion.

To disable temporary file deletion, create or modify the registry setting as follows:

HKLM\SOFTWARE\CREDANT\CMGShield

DeleteTempFiles (REG_DWORD)=0

Note that not deleting temporary files increases initial encryption time.

Hide Overlay Icons

By default, during installation, all encryption overlay icons are set to be shown. Use the following registry setting to hide

the encryption overlay icons for all managed users on a computer after the original installation.

Create or modify the registry setting as follows:

HKLM\Software\CREDANT\CMGShield

HideOverlayIcons (DWORD value)=1

If a user (with the appropriate privileges) chooses to show the encryption overlay icons, that setting will override this

registry value.

Hide System Tray Icon

By default, during installation, the system tray icon is displayed. Use the following registry setting to hide the system tray

icon for all managed users on a computer after the original installation.

Create or modify the registry setting as follows:

HKLM\Software\CREDANT\CMGShield

HIDESYSTRAYICON (DWORD value)=1

Slotted Activation

Slotted Activation is a feature that allows you to spread activations of Shields over a set time period in order to ease Server

load during a mass deployment. Activations are delayed based on algorithmically generated time slots, to provide a smooth

distribution of activation times.