Manualshelf

Deployment Guide

ManualsBrandsDell ManualsConverged InfrastructureEncryption
61626364656667686970
WSScan information about encrypted files contains the following information.
Example Output:
[2015-07-28 07:52:33] SysData.7vdlxrsb._SDENCR_: "c:\temp\Dell - test.log" is still AES256 encrypted
Output Meaning
Date/time stamp The date and time the file was scanned.
Encryption type The type of encryption used to encrypt the file.
SysData: SDE key.
User: User encryption key.
Common: Common encryption key.
WSScan does not report files encrypted using Encrypt for Sharing.
KCID The Key Computer ID.
As shown in the example above, "7vdlxrsb"
If you are scanning a mapped network drive, the scanning report does not return a
KCID.
UCID The User ID.
As shown in the example above, "_SDENCR_"
The UCID is shared by all the users of that computer.
File The path of the encrypted file.
As shown in the example above, "c:\temp\Dell - test.log"
Algorithm The encryption algorithm being used to encrypt the file.
As shown in the example above, "is still AES256 encrypted"
RIJNDAEL 128
RIJNDAEL 256
AES-128
AES-256
3DES
Check Encryption Removal Agent Status
The Encryption Removal Agent displays its status in the description area of the services panel (Start > Run > services.msc >
OK) as follows. Periodically refresh the service (highlight the service > right-click > Refresh) to update its status.
● Waiting for SDE Deactivation - Encryption is still installed, is still configured, or both. Decryption does not start until
Encryption is uninstalled.
● Initial sweep - The service is making an initial sweep, calculating the number of encrypted files and bytes. The initial sweep
occurs one time.
● Decryption sweep - The service is decrypting files and possibly requesting to decrypt locked files.
● Decrypt on Reboot (partial) - The decryption sweep is complete and some locked files (but not all) are to be decrypted on
the next restart.
● Decrypt on Reboot - The decryption sweep is complete and all locked files are to be decrypted on the next restart.
● All files could not be decrypted - The decryption sweep is complete, but all files could not be decrypted. This status
means one of the following occurred:
○ The locked files could not be scheduled for decryption because they were too big, or an error occurred while making the
request to unlock them.
○ An input/output error occurred while decrypting files.
68
Troubleshooting