Reference Guide

Manage Policies
268
• Windows Media Encryption
• EMS Scan External Media
• EMS Encryption Algorithm
• EMS Exclude CD/DVD Encryption
• EMS Data Encryption Key
Advanced Removable Media Encryption
A note about Removable Storage policies: Encryption External Media for Mac policies are device-based
policies. This is different behavior than Encryption External Media for Windows, which are user-based.
Policy descriptions also display in tooltips in the Remote Management Console. In this table, master policies
are in bold font.
Policy
Default Setting
Description
Windows Media Encryption
This technology works on Windows computers using Dell Encryption External Media to encrypt data on
removable devices, which can be accessed using a user-defined password. These policies allow configuration
of the Encryption External Media password requirements and the removable media allowed.
Windows Media Encryption
Off
This policy must be selected to use all other Removable Storage policies. Not
Selected means that no encryption of removable storage takes place, regardless
of other policy values.
EMS Exclude CD/DVD
Encryption
Not Selected False encrypts CD/DVD devices.
EMS Allow Read-access to
unShielded Media (5.4.x
Only)
Selected
This policy applies to 5.4.x Windows Encryption clients only.
More...
If an end-user chooses not to encrypt media and this policy is set to True, they
will be able to read or delete existing files on the media that is not Dell-
encrypted, but the Encryption client will not allow any files to be edited on or
added to the removable storage unless it is Dell-encrypted.
EMS Encryption Algorithm
AES256
AES 256, AES 128, 3DES
Encryption algorithm used to encrypt removable storage.
Encryption algorithms in order of speed, fastest first, are AES 128, AES 256,
3DES.
EMS Data Encryption Key User Roaming
Common, User, User Roaming
Choose a key to be used by the Encryption client to encrypt all data encrypted
by the Encryption External Media.
More...
You cannot save a policy where this policy has the same value as either User
Data Encryption Key policy or Application Data Encryption Key policy, the error
message Policy Constraint Violation: The value for EMS Data Encryption Key
conflicts with User Data Encryption Key and/or Application Data Encryption Key
will display.
EMS Automatic
Authentication
Disabled
Disabled, Local, Roaming
Local automatic authentication allo
ws the encrypted media to be automatically
authenticated when inserted in the originally encrypting computer when the
owner of that media is logged in. When automatic authentication is Disabled,
users must always manually authenticate to access encrypted media.
Not Selecting Roaming automatic authentication helps to prevent users from
forgetting their password when they take the media home or share it with a