Reference Guide

Security Management Server Virtual v10.2.11 AdminHelp
Policy Default Setting Description
Mac Media Encryption
This technology works on Mac computers using Dell Encryption External Media to encrypt data on
removable devices, which can be accessed using a user-defined password. These policies allow
configuration of the Encryption External Media password requirements and the removable media
allowed.
Mac Media Encryption Off
Toggle On to enable Mac Removable
Media Encryption policies. If this
policy is toggled to OFF, no Mac
Removable Media Encryption takes
place, regardless of other policies.
HFS Plus is supported and must be
enabled. For instructions to enable
HFS Plus, see the Encryption
Enterprise for Mac Administrator
Guide.
Media containing Time Machine backups
are not supported. However, media
recognized by computers as Time
Machine backu
p destinations are
automatically whitelisted, to allow
backups to continue. All other
removable media with Time Machine
backups are handled based on
EMS
Access to unShielded Media
and EMS
Block Access to UnShieldable Media
policies.
EMS Scan External Media Not Selected
Selected allows removable media to be
scanned every time it is inserted.
When this policy is Not Selected and
the Windows Media Encryption policy
is Selected, only new and changed
files are encrypted.
More...
A scan occurs at every insertion so
that any files added to the removable
media without authenticating can be
caught. Files can be added to the
media if authentication is declined,
but encrypted data cannot be
accessed. The files added are not
encrypted in this case, so the next
time the media is authenticated (to
work with encrypted data), any files
that may have been added are
scanned and encrypted.
EMS Access to unShielded Media Read Only
Block, Read Only, Full Access
When this policy is set to Block
Access, you have no access to
remo
vable media unless it is
encrypted.
Choosing either Read
-Only or Full
Access allows you to decide what
media to encrypt.
If you choose not to encrypt
removable storage and this policy is
set to Full Access, you have full
read/write access to removable medi
a.
If you choose not to encrypt
249