4
Click Import Keys.
How user personal keys work
User personal key gives you ability to create user-specific encryption keys. These keys are
created at the ePO server when the user logs on to the client system for the first time after the
policy is enforced. User personal keys are assigned to Grant key policy as a single key, but
creates individual user personal keys when assigned. If the policy is assigned at the system
level, users using that system will have individual user personal keys. When assigned at user
level, these keys can be used on any system within the same domain.
The user personal key is enabled and assigned to Grant Key policy using ePO. The Grant key
policy can be assigned to specific users using Policy Assignment Rules and specific system or
system group using Assigned Policies page. Enforcing the Grant key policy on the managed
node creates a user personal key at the first log on of the user. User personal keys can be used
as recovery key for user local keys and EERM.
Best Practice
Assigning a user personal key as a recovery key for EERM, the administrator can ensure that
the removable media can be recovered only by the assigned user on any system in the same
domain.
Working with user personal keys
Use these tasks to create and recover user personal keys.
Tasks
Assigning a user personal key
Recovering user personal keys
Assigning a user personal key
Use this task to create a user personal key.
Task
For option definitions, click ? in the interface.
1
Click Menu | Data Protection | EEFF keys. The EEFF Key Management page appears.
2
Click Edit next to User Personal Keys. The Configure User Personal Keys page appears.
3
Select Enable User Personal Keys, then click Save.
4
Click Menu | Policy | Policy Catalog, then select Endpoint Encryption for Files and
Folders from the Product drop-down list.
5
Select Grant Keys (UBP) as policy Category, then click Edit Settings next to the
required policy.
6
Select and move the User Personal Key to Selected Keys table, then click Save.
7
Click Menu | Policy | Policy Assignment Rules, then click New Assignment Rule.
The Policy Assignment Builder wizard appears.
8
Type the Name and Description, then click Next. The user Selection Criteria page opens.
Managing EEFF keys
How user personal keys work
33
McAfee Endpoint Encryption for Files and Folders version 4.0.0 Product Guide
