What you need to know about disk encryption?
- If the protection is placed on the partition is the boot / system, then log in to access it will need to load the operating system.
- If your system and boot partitions are on different logical drives, and both are protected, you need to connect each of these sections.
- Setting security on the system partition on the hard drive protects the memory dump file (crash dump), as well as the contents of RAM when going to sleep (hibernate) mode.
- Working with a protected disk or removable media is possible if the computer system installed Kaspersky KryptoStorage subsystem is running Protected CDs.
- If you posted a secure system and / or boot partition, then the configurator system does not allow to disable the subsystem Protected CDs. In this case, in the main window Kaspersky KryptoStorage section Subsystems KryptoStorage unit Protected CDs unavailable to make changes.
- Do not use Kaspersky KryptoStorage on computers with multiple operating systems and thus protect the partitions needed to boot the installed operating systems.
- Data Kaspersky KryptoStorage all secure logical partitions of physical media (physical hard drive, Flash-drive, etc.) are in the root directory of the first LPAR physical media in the file iwcs.bin. In case of formatting the partition that contains the file iwcs.bin, or in case of removal, replacement, or damage to the file access to all protected logical unit of physical media may be lost.
Restrictions on the protection of logical partitions on the hard disk and removable storage media:
- Security settings on logical partitions of hard disks and removable storage media is possible if the corresponding device has a sector size 512 bytes (standard size sector for most devices of this type).
- Setting security on the dynamic partitions are not supported.
- Security can only be installed on local hard drives. Protecting network drives are not supported.
- On a single physical disk can not be simultaneously running install / uninstall / reinstall the protection for multiple logical partitions. With logical partitions of different disks can be run simultaneously.
- Protecting a logical partition on the hard disk which is installed Kaspersky KryptoStorage, is allowed only under the condition that this section is a systemic and / or boot.
- Installation of protection may be provided to the protected partition is writable.
- Start the installation of protection to the removable disk is possible only if the files on the removable disk does not use any programs. During the installation of protection possible to use the files on the removable disk.
- B Kaspersky KryptoStorage protection is not supported CD / DVD-drives.
- Change size of logical partitions on your hard disk (exactly like their division, a merger) could lead to data loss. If these changes are necessary, then remove the protection of sections before beginning work.
Installing the protection of the logical partition or removable media. During the installation of protection can continue to work with the device, because process runs in the background. The process can be interrupted, then either continue or abandon the protection of the object. Go running in standby or hibernation mode automatically terminates the installation of protection. After loading the operating system installation can proceed, you can refuse it.
There are two ways to install protection:
- From the main window, the button Encrypt the.
- From the context menu of an object, para Kaspersky KryptoStorage - Set the protection on the disc.
In the "Disk Encryption" need to specify the desired drive (if you use the first method), password and password hint. By pressing OK starts the encryption process. The process can be monitored visually:
Upon successful completion of the user is notified.
While the protection is not installed, you can click on the "Stop" button. Then you will see login screen (where you need to enter a password to access the object). The next window will be a message about the successful termination of the encryption.
In case of termination of the encryption (either manually or the system went into standby / sleep mode, or the computer had been switched off), the object is partially encrypted, but it is considered secure. Because the work with this object is only possible when connecting it and entering a password. Of course, if the defense was not established until the end, the information is not encrypted. In the resulting situation can either resume the encryption, or cancel the installation.
To resume the installation of protection you need to connect an object (if it was turned off) and in its context menu, select Kaspersky KryptoStorage - Continue to install protection at the. encryption process will continue.
To cancel the installation of site protection, you need to object context menu, select Kaspersky KryptoStorage - Uninstall Disk Protection. To perform the operation will require authorization.
To use a protected object you'll need to first connect. To this end, the object context menu to select the Kaspersky KryptoStorage - Connect the. The procedure requires the passage of the authorization. Upon completion of the work with an object is recommended to disable it, since connected object - this is not a protected object. To do this in the context menu to select the Kaspersky KryptoStorage - Disable the. Objects can also be disabled if the OS reloaded.
Boot from the system and / or boot disk, protected Kaspersky KryptoStorage possible only after the passage of the authorization. Authorization request will be in the process of downloading the PC to boot OS:
After successful authentication the OS is booted. If you make a mistake when entering the password, you will get a message about invalid password and a proposal to press any key. If the installation of security has been given a hint, it will be shown:
Can I try again. If the hint was not given, then repeating the procedure for authorization will need to restart your computer, using a combination of Ctrl + Alt + Del.
To unprotect an object, it is necessary in its context menu, select Kaspersky KryptoStorage - Unprotect the. The procedure requires authorization, the object must first be connected. The process of removing protection, as well as encryption, can be interrupted and resumed. The algorithm works as similar to the algorithms for encryption.
|