New Media Security - Protecting The Mobile User
NMS For PC - FAQs
         
bar
 
NMS For PC Secure Log On
 
bar
 
NMS For PC - Stops unauthorised access
 
bar
 
NMS for PC - Uses Data Encryption to Protect your Data
 
bar
         

Products> NMS For PC> FAQs>

NMS for PC - Frequently Asked Questions

Click on the question to reveal/hide the answer.

How do I encrypt folders and subfolders?

NMS for PC allows you to set the status of any folder or folders you choose to be encrypted. This means that files they contain will be automatically encrypted. Optionally, subfolders can be set up to be encrypted automatically, and this includes any subfolders created afterwards. You must be logged in as a user that has Encryption Manager, Decryption Manager, or System Manager rights.
  1. From Windows Explorer or My Computer, right click on the folder you want to encrypt.
  2. Choose Encrypt Folder. If you want to encrypt subfolders, select Include Subfolders.

How do I encrypt the whole hard drive?

NMS for PC allows you to encrypt all files on your local hard drives except those specified in the Exclusion List set up by the System Manager, which are operating system files and other system files. You can set up a drive to be encrypted and have all subfolders automatically encrypted.

You must be logged in as a user that has Encryption Manager, Decryption Manager or System Manager rights.

  1. From Windows Explorer or My Computer, right click on the drive you want to encrypt.
  2. Choose Encrypt Drive and select Include Subfolders.

How do I share encrypted data with other PCs on the network?

All the PCs that you want to be able to share encrypted files must be installed with NMS for PC using the same Production Encryption Key (PEK). To set up a number of PCs with the same PEK, enter a known PEK manually at installation on each PC, or use the Mass Deployment System to create an install kit for distribution to your PCs. The Mass Deployment System is part of the Management Suite of tools available with the Enterprise Edition of NMS for PC.
  1. Set up sharing on the folders and/or drives you want to share encrypted data.
  2. Make the drives/folders mapped network drives.
  3. Encrypt the mapped network drives or areas on the mapped network drives from Windows Explorer or My Computer.

How do I make sure that all removable media is encrypted?

System Managers can add an Inclusion rule from the Inclusions tab, which is accessed from the NMS for PC Control Panel applet. Adding the rule *.* on Drive A is a good way of ensuring that sensitive files are never removed from the PC to a floppy in plain format.

Removable USB drives can be secured automatically. NMS for PC can be set up so that when a file is created on or copied to a removable USB drive, it will automatically be encrypted. This applies to any USB storage media already connected to the PC, and any removable USB media that anyone might connect to the PC.

To set up NMS for PC to do this, you must be logged in as a user that has System Manager rights.

  1. From the NMS for PC Control Panel applet, select the Inclusions tab.
  2. Mark the checkbox Secure USB Removable Media.

How can I see if a folder/file/drive is encrypted?

There are two methods. The Properties command in My Computer and Windows Explorer has a tab labelled NMS for PC. This shows the status of the folder/drive as plain or encrypted, the number of encrypted files it contains, and a list of the file names of the encrypted files it holds. NMS for PC can also show icons in My Computer and Windows Explorer which depict encrypted folders and/or files by overlaying a small black dot in the lower right-hand corner of the symbol for the item. When configuring NMS for PC, the System Manager decides which types of NMS for PC user can see encryption icons for folders and/or files.

How do I stop other NMS for PC users from seeing my encrypted data?

For a PC that is being shared between a number of users, all users other than users with access level Limited User will be able to read, modify, move and delete encrypted files. The same is true when sharing encrypted data over the network with other PCs using the same PEK. To prevent other users from seeing encrypted files/folders, use the Microsoft permissioning facility in Windows NT/2000/XP.

Do I install NMS for PC on the server?

No, Never install NMS for PC on the server. If you are using NMS for PC across a network, and are storing encrypted data on a server, you only need to install NMS for PC on the workstations from which you need to access that data. Only workstations that have NMS for PC installed with the same PEK can read the encrypted data on the server (or any other mapped shared network drives).

What servers can I use with NMS for PC?

Windows NT4 and Windows 2000. IBM "I" and "P" series servers running Linux. Novell servers, but note that encryption of network drives is not allowed on Novell.

Do I need to uninstall earlier versions of NMS for PC from my PC before installing a new version?

No, you can overinstall any new version over an old one. The encrypted files, users, Exclusion List and Inclusion rules will remain the same.

Note:You cannot over install NMS for PC over Black Whole. If you have Black Whole installed, you must decrypt all your encrypted information and uninstall Black Whole before you can install NMS for PC.

How do I set up so that NMS for PC password is changed when Windows password changes?

If the Windows password is set to be changed regularly, you can also set the NMS for PC password to be changed at the same time. Some users find it more convenient if the changing of the NMS for PC and Windows passwords is synchronised in this way. When the Windows password needs changing, NMS for PC enters the old password for you, so you don't have to remember it - just choose the new one.
  1. Log in as a System Manager user, and from the NMS for PC Control Panel applet, choose the Password Rules tab.
  2. Under the area Force password to: mark the option be changed if the Windows password changes.

How do I make the user change their password regularly?

You can set the NMS for PC password to expire after the number of days you specify. By default, this is set up as 31 days for each user. When this period has elapsed, and the user logs on, they will be forced to change it as soon as login is completed.
  1. Log in as a System Manager user, and from the NMS for PC Control Panel applet, choose the Password Rules tab.
  2. Under the Passwords area, change the Default expiry period to the value you require.
  3. Make sure all the users you require to follow this rule have their Password expiry value set to Default Period. From the Users tab click on a user name and check if the value shown under Password expiry shows Never. If it does, change it to Default Period.

How do I set up NMS for PC to single sign-on to Windows or other authentication method?

By default, single sign-on to Windows is automatic. After you have logged in for the first time, NMS for PC will single sign you on to Windows (or Novell, as appropriate), for subsequent logins. NMS for PC offers single sign-on through the NMS for PC login and the Microsoft login, or the Novell client login.

If you are using Identix fingerprint readers or ActivCard smart cards under Windows NT/2000/XP single sign-on can also be configured through the physical authentication method alone; that is without having to enter the NMS for PC password.

  1. Log in as a System Manager user, and from the NMS for PC Control Panel applet, choose the Sign On tab.
  2. From the Primary drop down list, if you have any other authentication method installed, you can choose that instead of NMS for PC. NMS for PC is chosen automatically as the Secondary method.
  3. To remove the requirement for entering the NMS for PC password for secondary authentication, tick the checkbox that is marked Single Sign-on to NMS for PC.

Can users uninstall NMS for PC?

Only users with access level of System Manager can uninstall NMS for PC.

What happens to encrypted data if I uninstall NMS for PC?

You cannot uninstall NMS for PC if any of the local drives contain encrypted data. The uninstallation process aborts and a text file is created and displayed, which shows where the encrypted data is held.

How do I prevent end users from changing the security policy?

NMS for PC offers 5 levels of user access, the highest of which is System Manager, who has full administration rights. We recommend that most user are designated as Normal users, who have no administration rights other than the ability to change their own NMS for PC password. Normal users cannot change encrypted folders into plain, nor uninstall NMS for PC software. All System Manager accounts can be set up as locked and only accessible using the Remote Recovery Manager, one of the tools available in the Management Suite: a set of programs that is delivered with the Enterprise Edition of NMS for PC.

Top of page


:: NMS FOR PC

SpacerPC FAQs
SpacerDOWNLOADS

:: NMS FOR PDA

SpacerPDA FAQs
SpacerDOWNLOADS

:: NMS NCODE

SpacerDOWNLOADS

:: REQUEST A QUOTE

Telephone:
+44 (0)1932 854968

E-mail: nms.support@newmediasecurity.com


  | Home | Products | Services | Support | Partners | Contact Us |
      © New Media Security 2008  
 
Designed by abc2xyz