User`s Guide
Transcription
User`s Guide
ViPNet SafeDisk 3.3 User's Guide © 1991–2012 Infotecs ®. All rights reserved. Version: 00012-06 34 01 ENU This document is included in the software distribution kit and is subject to the same terms and conditions as the software itself. No part of this publication may be reproduced, published, stored in an electronic database, or transmitted, in any form or by any means — electronic, mechanical, recording, or otherwise — for any purpose, without the prior written consent of Infotecs JSC. ViPNet is a registered trademark of Infotecs JSC, Moscow, Russia. All brands and product names that are trademarks or registered trademarks are the property of their owners. Infotecs GmbH Oberwallstr. 24 10117 Berlin Deutschland Tel: +49 (0) 30 206 43 66 0 Fax: +49 (0) 30 206 43 66 66 Email: [email protected] Web: http://www.infotecs.biz Contents Introduction ....................................................................................................................................... 8 About This Document .................................................................................................... 9 Audience................................................................................................................. 9 Document Conventions .......................................................................................... 9 About ViPNet SafeDisk.................................................................................................. 11 What's New in Version 3.3.0 .......................................................................................... 12 System Requirements ..................................................................................................... 15 Limitations of a Free Edition .......................................................................................... 16 Distribution Kit ............................................................................................................... 17 Feedback ......................................................................................................................... 18 Chapter 1. General Information ...................................................................................................... 19 ViPNet SafeDisk Main Features..................................................................................... 20 Principles of ViPNet Information Protection. ViPNet SafeDisk at a Glance ................. 21 Chapter 2. Installing, Starting, Upgrading and Uninstalling ViPNet SafeDisk .......................... 22 Installing ViPNet SafeDisk ............................................................................................ 23 Upgrading ViPNet SafeDisk .......................................................................................... 24 Converting a Container .......................................................................................... 26 Starting ViPNet SafeDisk ............................................................................................... 28 Finishing the Work with ViPNet SafeDisk .................................................................... 29 Uninstalling ViPNet SafeDisk ........................................................................................ 32 Chapter 3. Getting Started with ViPNet SafeDisk ......................................................................... 34 Launching ViPNet SafeDisk for the First Time ............................................................. 35 Setting a User Password ................................................................................................. 37 Creating a User Defined Password ......................................................................... 37 Generating a Random Password............................................................................. 37 Changing How Random Passwords Are Generated ............................................... 39 Changing a User Password ............................................................................................. 40 Chapter 4. Registering ViPNet SafeDisk ........................................................................................ 41 Before You Begin ........................................................................................................... 42 Why You Need to Register .................................................................................... 42 Beginning Registration ........................................................................................... 42 Buying the Program (Getting a Serial Number) ............................................................. 44 Requesting a Registration Code ..................................................................................... 45 Requesting Your Registration Code on the Internet (Online) ................................ 45 Requesting Your Registration Code by Email ....................................................... 48 Requesting Your Registration Code by Phone ....................................................... 49 Receiving Your Registration Code from the Administrator................................... 51 Registering ViPNet SafeDisk ......................................................................................... 53 Saving Registration Data ........................................................................................ 55 If the Configuration of Your Computer Has Been Changed .......................... 55 System Administrator Actions for Registration Using a File ......................................... 56 Chapter 5. Protecting Information with ViPNet SafeDisk ............................................................ 57 Checklist: Protecting Your Information ......................................................................... 59 Creating a Container ....................................................................................................... 60 Backup Copy of Container Keys .................................................................................... 68 Starting a Wizard for Creating a Backup Copy of Container Keys........................ 68 Creating a Backup Copy of Container Keys .......................................................... 69 Connecting a Container .................................................................................................. 72 Connecting a Container Using a Key File .............................................................. 74 Connecting a Container with an External Device .................................................. 74 Connecting an Existing Container.......................................................................... 75 Formatting a Container ................................................................................................... 77 Common Workflow When Protecting Your Sensitive Information ............................... 79 ViPNet SafeDisk Container Icons .......................................................................... 79 Disconnecting a Container.............................................................................................. 81 Viewing and Changing Container Properties ................................................................. 83 Updating Container Keys ............................................................................................... 86 Changing Container File Location ................................................................................. 88 Deleting a Container ....................................................................................................... 89 Configuring ViPNet SafeDisk ........................................................................................ 90 Chapter 6. Exporting and Importing Protected Information ....................................................... 92 Why Do You Need It? .................................................................................................... 93 Exporting a Container..................................................................................................... 95 Importing a Container to a PC ........................................................................................ 98 Importing a Container from a Container Export File ............................................. 98 Importing a Container Using a Backup Copy of Container Keys .......................... 101 Chapter 7. Restoring Access to Protected Information ................................................................. 105 Why Do You Need It? .................................................................................................... 106 Restoring Protected Information. Best Practices ............................................................ 107 Restoring Access to All Containers by Restoring Configuration ................................... 109 Creating a Configuration Backup Copy ................................................................. 109 Editing the Configuration Backup Copies List ...................................................... 111 Restoring a Configuration ...................................................................................... 112 Cancelling the Last Configuration Restore ............................................................ 113 Chapter 8. Using ViPNet SafeDisk in a Team ................................................................................ 115 Controlling Access to Protected Information. Registering a New User ......................... 116 Sharing Your Containers ................................................................................................ 118 Container Access Security...................................................................................... 119 Providing Access to Your Container for One or More Users on the Same or Different Computer ................................................................................................ 120 Sharing Your Containers on a Network ................................................................. 120 Stopping Containers Sharing .................................................................................. 124 Protecting Information Stored on a Server ..................................................................... 125 Transferring Confidential Information with a Courier or via Network .......................... 127 Chapter 9. Working in Potentially Insecure Conditions ............................................................... 128 Checklist: Preparing to Work in Insecure Environment ................................................. 129 Working under Malicious Users' Control ....................................................................... 130 Preparing for Work under Malicious Users' Control.............................................. 130 Working while under Malicious Users' Control ..................................................... 130 Immediate Denial of Access to Protected Information. Danger Mode........................... 131 Destroying Confidential Information. Extreme Danger Mode ....................................... 134 Key Combinations for the Danger and Extreme Danger Modes .................................... 137 Chapter 10. Removing Traces of Secure Data on Your Computer .............................................. 138 Why Do You Need It? .................................................................................................... 139 Cleaning Secure Data. Common Workflow ................................................................... 141 Checklist: Cleaning Secure Data .................................................................................... 142 Removing Traces of Windows Activities ....................................................................... 143 Removing Traces of Recently Opened Documents................................................ 143 Deleting Temporary Files....................................................................................... 143 Cleaning the Recycle Bin ....................................................................................... 144 Deleting Unprotected Files Securely ...................................................................... 144 Deleting Files Securely .................................................................................. 145 Securely Cleaning Free Disk Space ............................................................... 145 Choosing Default Disks to Clean Free Space On .......................................... 146 Removing Traces of Internet Explorer Activities ........................................................... 148 Deleting Your Browsing History ........................................................................... 148 Deleting Temporary Internet Files ......................................................................... 148 Deleting Cookies .................................................................................................... 149 Full Cleanup ................................................................................................................... 151 Configuring Full Cleanup....................................................................................... 152 Full Cleanup Using the Command Line ......................................................................... 154 Chapter 11. Troubleshooting ........................................................................................................... 156 Viewing the Events Log ................................................................................................. 157 Other Common Issues .................................................................................................... 158 Container Not Available......................................................................................... 158 Formatting Disks Impossible.................................................................................. 158 Container File Not Found ....................................................................................... 158 Connection to a Container Lost .............................................................................. 159 Cannot Connect to a Container .............................................................................. 159 Compress or Encrypt Attribute Is Set for the Container File ................................. 159 Unable to Create a Container with the External Device Protection Type .............. 160 Appendix A. Version History .......................................................................................................... 161 Version 3.2.2 .......................................................................................................... 161 Version 3.2.1 .......................................................................................................... 161 Version 3.2.0 .......................................................................................................... 162 Version 3.1.1 .......................................................................................................... 162 Version 3.1.0 .......................................................................................................... 162 Appendix B. Supported External Storage Devices........................................................................ 164 Appendix C. Regional Settings........................................................................................................ 167 Appendix D. Glossary ...................................................................................................................... 173 Appendix E. Index............................................................................................................................ 176 Introduction About This Document 9 About ViPNet SafeDisk 11 What's New in Version 3.3.0 12 System Requirements 15 Limitations of a Free Edition 16 Distribution Kit 17 Feedback 18 ViPNet SafeDisk 3.3. User's Guide |8 About This Document Audience This guide addresses the needs of anyone who wants to use the ViPNet SafeDisk software to protect their information quickly, easily and effectively. This guide starts with a general explanation of the ViPNet SafeDisk technology. Then it delves into ViPNet SafeDisk installation and registration. Next chapters inform you about tasks you can complete using ViPNet SafeDisk. The guide ends with a brief explanation of troubleshooting scenarios, thus allowing you to avoid some common pitfalls. In between, the material is organized in order of increasing detail and complexity. This means you can read until you learn what you need at the moment, and then continue as the need arises. Alternatively, you can approach this guide randomly, on a sort of need to know basis. The index and table of contents will guide you to the specific information you need. We assume that you have basic knowledge of how to work in Windows operating systems and why your confidential information should be protected. Document Conventions This document concerns the following conventions: Table 1. Document conventions Icon Description Warning: Indicates an obligatory action or information which may be critical for continuing user operations. Note: Indicates a non-obligatory, but desirable action or information which may be helpful for users. Tip: Contains additional information. ViPNet SafeDisk 3.3. User's Guide |9 Table 2. Conventions for highlighted information Icon Description Name The name of an interface element. For instance, the name of a window, a box, a button or a key. Key+Key Shortcut keys. To use the shortcut keys, press and hold the first key and press other keys. Menu > Submenu > Command A hierarchical sequence of elements. For instance, menu items or sections in the navigation pane. Code A file name, path, text file (code) fragment or a command executed from the command line. ViPNet SafeDisk 3.3. User's Guide | 10 About ViPNet SafeDisk In our modern times of technological progress, information is valuable; its leak can have severe consequences. Unwanted or even malicious users may be interested in gaining access to data — such as business correspondence, reports on company activity, innovations and so on; they aim to make money, to injure your business reputation or to usurp authors’ rights. Even if your documents are not secret, do you really want others with access to your computer to read your correspondence, notes and diaries or view your photos? Your friends and relatives may even accidentally remove or modify sensitive documents — with undesirable consequences. So, it is very important to protect your information from being read, modified, copied or removed by other persons. You should pay special attention to information protection if you use a laptop, as you might easily leave it unattended (or perhaps even have it stolen). You need to protect your information while ensuring access for those who need it, for example, your employees. Of course, you should be able to protect yourself without too much time or effort. If you do not know anything about cryptography, it should have no impact on your information protection experience. Encryption/decryption operation should be transparent and do not require too much action from your side. In addition, the software you intend to use should seamlessly integrate into business processes, you have accustomed to. The ViPNet SafeDisk software successfully solves all these problems. It protects your confidential information while allowing access for those who need it. ViPNet SafeDisk 3.3. User's Guide | 11 What's New in Version 3.3.0 This section contains a brief description of changes made to ViPNet SafeDisk 3.3.0 and its new features. Forced container disconnection You can force container disconnection in case files stored in the container are used by other application. Figure 1: Forced container disconnection Changing Container Keys To increase the security of information stored in containers, you can now update container keys that are used to encrypt your container contents. After you update container keys, you will not be able to get access to your container using old keys. We recommend you to update container keys at least every 15 months. Figure 2: Update container keys Storing Container Keys Backup Copy on an External Device To increase the security of information stored in containers, you can store your container keys backup copy on an external device. For details, see the list of supported external storage devices. ViPNet SafeDisk 3.3. User's Guide | 12 Container formatting Previously, when you were formatting a container, you used a standard Windows interface. Now, for your comfort, the container formatting wizard has been developed. The wizard starts automatically when you connect a container that has not been formatted. Figure 3: Formatting a container Modified limitations of a free edition Previously, in a free edition of the software, the maximum container size was 100 MB. Now, using a free edition, you can create a container that is up to 1 GB in size. Increased default container size Previously, the default container size was 100 KB. Now, to provide the user with a more positive experience and the ability to work with a greater amount of information, the default container has been increased up to 100 MB. Running several instances of ViPNet SafeDisk independently in different sessions of the operating system Now you can run several software instances independently in the different sessions of the operating system. This allows you to organize several users to work with the software on the same computer simultaneously and independently from one another, each in his or her own private session of the operating system. Exclusive access Now, for the operating systems Microsoft Windows XP SP3 (32 bit)/Server 2003 (32/64 bit), you can restrict acces to a container by selecting the Exclusive access check box. Previously, you could restrict access to a container only by means of the operating system. ViPNet SafeDisk 3.3. User's Guide | 13 Figure 4: Configuring exclusive access No need to restart the computer after the software setup or upgrade Previously, for the changes to take effect, you had to restart your computer after the software setup or upgrade. Now you do not have to. Improved Documentation and Help Documentation and Help files have been revised. Description of new functionality has been added, the chapters have been updated to reflect the changes in the program interface. ViPNet SafeDisk 3.3. User's Guide | 14 System Requirements The minimum system requirements for your computer to run ViPNet SafeDisk are as follows: Processor — Intel Core 2 Duo or any other x86-compatible processor of similar characteristics with two or more cores. RAM: 128 MB. Free disk space: 20 MB. A network adapter or modem. Operating system — Microsoft Windows XP SP3 (32 bit), Server 2003 (32 bit), Vista SP2 (32/64 bit), Server 2008 (32/64 bit), Windows 7 (32/64 bit). Internet Explorer version 6.0 or later. ViPNet SafeDisk supports several types of external devices. For more information on external devices, see Supported External Storage Devices (on page 164). ViPNet SafeDisk 3.3. User's Guide | 15 Limitations of a Free Edition A free edition is a new ViPNet SafeDisk 3.1 feature. There is no trial period, but there are some limitations in ViPNet SafeDisk functionality. When you install ViPNet SafeDisk 3.3 for the first time and decide not to register it, you will encounter the following limitations of the free edition: Number of users — no more than one. Number of containers — no more than one. Container’s size — no more than 1 GB. To remove these limitations, register the program (buy a pay version) (see Registering ViPNet SafeDisk on page 41). You can find out whether your ViPNet SafeDisk is a free edition or a pay version in the About ViPNet SafeDisk window. You can install ViPNet SafeDisk version 3.3 (or later) above the registered 2.9 version or earlier and also choose not to register it. In this case, you and all other users registered in version 2.9 will be able to work with the existing containers and configuration backup copies. However, to create or import new containers or to add another user you will have to register your copy of the program. If you install ViPNet SafeDisk version 3.3 above the registered 3.0, 3.1, 3.2 version you will not encounter any limitations. If you upgrade any unregistered or trial version of SafeDisk with the version 3.3 you will not be able to work with the current configuration (a list of users, containers and configuration backup copies). This means that the software will work as if you have installed it for the first time and chosen not to register it. ViPNet SafeDisk 3.3. User's Guide | 16 Distribution Kit The ViPNet SafeDisk distribution kit contains: a ViPNet SafeDisk installation file — Setup.exe; “ViPNet SafeDisk 3.3. User's Guide.” All the documents are shipped in electronic form in PDF format. ViPNet SafeDisk 3.3. User's Guide | 17 Feedback Finding Additional Information For more information about Infotecs products and technologies, see the following resources: Information about current Infotecs products http://www.infotecs.biz/soft.htm. Information about Infotecs solutions http://www.infotecs.biz/solution.htm. Frequently asked questions http://www.infotecs.biz/faq.htm. Contacting Infotecs We value any feedback from you. If you have any questions concerning Infotecs products and solutions, any suggestions, complains or other feedback, feel free to contact us by means of the following: Support request form https://secure.infotecs.biz/service.htm. Support email [email protected]. +49 (0) 30 206 43 66 0 — telephone. +49 (0) 30 206 43 66 66 — fax. Errata Infotecs makes every effort to ensure that there are no errors or misprints in the text of all documents supplied with ViPNet software. However, no one is perfect, and mistakes do occur. If you find an error in one of our documents, like a spelling mistake or some inaccuracy in describing user scenarios or system functions, we would be very grateful for your feedback. By sending in errata you may save other reader hours of frustration, and at the same time you will be helping us provide documentation in even higher quality. ViPNet SafeDisk 3.3. User's Guide | 18 1 General Information ViPNet SafeDisk Main Features 20 Principles of ViPNet Information Protection. ViPNet SafeDisk at a Glance 21 ViPNet SafeDisk 3.3. User's Guide | 19 ViPNet SafeDisk Main Features ViPNet SafeDisk is your right choice if: You need to ensure that your relatives, friends or colleagues do not read, modify or remove your important documents accidentally or on purpose. You store your information on a laptop and want to prevent it from being read, copied or used by someone else (if lost or stolen). You have confidential information stored on several computers, for example, at home and at work, and need to protect each one, allowing secure data transfer from one computer to another. You need to transfer confidential information on a removable media and want to prevent the data from being stolen or lost. You need to control access to confidential information on one or several computers, for example, hide some documents from one user while providing access for another. As a result of outsiders approaching your computer, you need to deny access immediately and hide your confidential information — along with the fact that it actually exists. As a result of malicious users approaching your computer, you need to resort to removing your confidential information quickly and securely. ViPNet SafeDisk 3.3. User's Guide | 20 Principles of ViPNet Information Protection. ViPNet SafeDisk at a Glance You create a container as an encrypted file on a disk or removable media and specify access — by password, key file or token. When you connect a container, it appears as a usual Windows disk and you can save your confidential information on it. Information is automatically encrypted when you save it and is unencrypted when being accessed. This can be done quickly, allowing you to work with documents as usual and reliably protect your information. Data is encrypted and decrypted sector by sector when the corresponding sectors are being written and read. Thus, only the data used at the moment is being encrypted in the container. This provides high speed of protected data processing and transparency for users of the applications. If a container is located on a network drive, transferred data is encrypted, as encryption and decryption are done on a local computer. When you disconnect the container, it disappears from the system and cannot be found. Other users have no means of finding out whether such a container exists or gain access to it. To continue working with information stored in the container, reconnect it. by typing your password, specifying a key file or inserting a token. ViPNet SafeDisk 3.3. User's Guide | 21 2 Installing, Starting, Upgrading and Uninstalling ViPNet SafeDisk Installing ViPNet SafeDisk 23 Upgrading ViPNet SafeDisk 24 Starting ViPNet SafeDisk 28 Finishing the Work with ViPNet SafeDisk 29 Uninstalling ViPNet SafeDisk 32 ViPNet SafeDisk 3.3. User's Guide | 22 Installing ViPNet SafeDisk Warning: If ViPNet SafeDisk is installed on a computer with the Windows OS localization other than English, you should change Windows regional settings (see Regional Settings on page 167) for Latin characters to be displayed correctly in the ViPNet SafeDisk interface. To install ViPNet SafeDisk you should have administrative privileges on your OS. To install the software: 1 Click the launched. setup.exe, located in the installation package. The setup program will be 2 Follow the instructions. 3 You can register ViPNet SafeDisk after the installation. Unregistered ViPNet SafeDisk software is free of charge and there is an unlimited work period, but there are some functional limitations (see Limitations of a Free Edition on page 16). You need to register ViPNet SafeDisk if you want to enjoy a full-featured version. See Registering ViPNet SafeDisk (on page 41) for more information on ViPNet SafeDisk registration. ViPNet SafeDisk 3.3. User's Guide | 23 Upgrading ViPNet SafeDisk Warning: We strongly recommend you to upgrade ViPNet SafeDisk following the instructions in the order given below. To upgrade ViPNet SafeDisk, you need an installation file of the latest software version. To ensure the successful upgrading: 1 Depending on the version of the installed software, complete the following tasks: o If the current version of ViPNet SafeDisk is 2.9 or earlier and the protection type of the container is External device, change the protection type (see Viewing and Changing Container Properties on page 83) of the container. Containers created that way cannot be converted into a new format supported in the version 3.3. o If the current version of ViPNet SafeDisk is either 3.0 or 3.1, create backup copies of keys for the containers with the External device protection type. It is necessary if you want to access your containers after they have been converted into a new format. Warning: If the backup copies of keys are not created, information stored in these containers will not be accessible. You will be able to access the information only if you install the older ViPNet SafeDisk version anew. o If the version is 3.2 or later, no additional actions are required. Tip: To find out the software version installed on your computer, on the Help menu, select About SafeDisk. 2 3 Create a backup copy of your protected data. To do this, do one of the following: o Copy container files and backup copies of these containers' keys into a safe location. o Create export files of all your containers and copy them into a safe location. Read carefully information about the peculiarities of upgrading your current ViPNet SafeDisk version to version 3.3: ViPNet SafeDisk 3.3. User's Guide | 24 o If the current version of ViPNet SafeDisk is 2.9 or earlier, upon upgrading you will have a free edition of ViPNet SafeDisk 3.3 with a number of limitations installed. To remove these limitations, you need to re-purchase and register the ViPNet SafeDisk version being installed. o If the current version is a Demo one, upon upgrading you will have a free edition of ViPNetSafeDisk 3.3 installed and no access to the earlier created containers, user accounts and configuration backups. o If the current version is 3.2 or earlier, the notification on a changed container format will be shown informing you about the necessity to convert containers created in the earlier versions. All the configuration backups created in the earlier versions of ViPNet SafeDisk 3.2 or earlier will be deleted. 4 Unload all the ViPNet SafeDisk software components. 5 Double-click the setup.exe launched. file. The ViPNet SafeDisk setup program will be If you upgrade the software version 3.2 or earlier and have containers created, the ViPNet SafeDisk Update wizard will be launched. Figure 5: Upgradiing ViPNet SafeDisk version 3.2 and earlier In the wizard window, select the Yes, I accept the changes and understand the consequences of this update check box. As a result, the containers created in the versions 3.2 and earlier will be converted into a new format and will be accessible in ViPNet SafeDisk 3.3. To connect containers in the version 3.3, you should perform conversion (see Converting a Container on page 26). ViPNet SafeDisk 3.3. User's Guide | 25 6 Wait till the upgrading process is finished. If you have completed all the actions described above correctly, the upgrading process will be completed successfully and you will be able to start working with the program. Converting a Container To ensure a higher protection level for your private data, in ViPNet SafeDisk version 3.3, the container format has been changed. You should convert containers created in the earlier versions into a new format. To convert containers into the new format: 1 Start the program (see Starting ViPNet SafeDisk on page 28). 2 Connect container (see Connecting a Container on page 72) created in an earlier version. For this container, in the Status column, the Old format message will be displayed. Figure 6: Connecting a container created in an earlier version of the program 3 The Convert Container wizard will be launched. ViPNet SafeDisk 3.3. User's Guide | 26 Figure 7: Converting a container into the new format If you have not exported the container of the old format before upgrading the program, on the Convert Container page, select the Export container in the old format check box. The Export container wizard will be launched. Follow the instructions. Tip: You should export the container in order to work with this container in an earlier version of ViPNet SafeDisk in case you need to roll back. That is why we strongly recommend you to complete the export before converting. 4 Wait till the converting process is finished. As a result the container will be converted into a new format and will be accessible in ViPNet SafeDisk version 3.3. ViPNet SafeDisk 3.3. User's Guide | 27 Starting ViPNet SafeDisk To start ViPNet SafeDisk: 1 Either: o Click the Start button, choose All Programs > ViPNet > ViPNet SafeDisk. At the installation, the path to the program on the Start menu might have been changed. o On the desktop, double-click the ViPNet SafeDisk shortcut (this shortcut displayed only if the corresponding option has been selected during the installation). The window requesting your password will be shown. If you are launching ViPNet SafeDisk for the first time, follow the instructions found in the Launching ViPNet SafeDisk for the First Time (on page 35) section. Figure 8: The Enter password window 2 In the Enter password box, type your password and click OK. The ViPNet SafeDisk main window will be shown. If you do not have a user password yet, click the create password of a new user link and follow the instructions (see Controlling Access to Protected Information. Registering a New User on page 116). ViPNet SafeDisk 3.3. User's Guide | 28 Finishing the Work with ViPNet SafeDisk You can finish working with ViPNet SafeDisk in one of the following ways: By minimizing the program main window. The program will continue running, containers will be accessible, but the main window will be minimized to the notification area. You can maximize the program window when needed. By exiting the program. All the connected containers will be disconnected, the program will be closed. To minimize the main program window, either: in the upper right corner of the window, click the Close button press Alt+F4. , or As a result, the Closing ViPNet SafeDisk Window window will be displayed prompting you to choose whether to close the program or to minimize its main window. Choose Hide SafeDisk window without exit and click OK. Note: For the chosen action to be applied without the prompt each time you click the Close button , select the Do not show this window again check box. Also you can set the action in the program options window (see Configuring ViPNet SafeDisk on page 90). Figure 9: Closing the ViPNet SafeDisk window ViPNet SafeDisk 3.3. User's Guide | 29 Tip. If you are going to leave your computer unattended we strongly recommend you to use the Exit SafeDisk option. In addition, you can configure ViPNet SafeDisk to disconnect all containers, if no one is working with them. To do this, on the SafeDisk menu, click Options. Then, in the navigation pane, click General and, in the General pane, select the Disconnect containers after specified period of inactivity check box. For more information, see Making ViPNet SafeDisk General Settings (see Configuring ViPNet SafeDisk on page 90). To maximize a program window back, either: in the notification area, click the icon press Ctrl+Alt+M, or on your desktop, double-click the ViPNet SafeDisk shortcut , or . To exit ViPNet SafeDisk, either: in the notification area, right-click the icon in the main ViPNet SafeDisk main window, in the SafeDisk menu, click Exit. and choose Exit. When you finish working with ViPNet SafeDisk, the program disconnects all the connected containers. If for some reason you cannot disconnect your container (for example, the files stored in the container are being used by some other application), the corresponding warning will be displayed. Figure 10: A warning window informing that you cannot disconnect a container If such a window is displayed: 1 Make sure that the files stores in your container are not used by some other application and click Retry. ViPNet SafeDisk 3.3. User's Guide | 30 2 To force your container disconnection, in the message window, select the Force disconnection check box and click Retry. You will be warned about possible data loss. Figure 11: A warning about possible data loss 3 Make sure that all data in your container are saved and click Yes. Note: If some information stored in your container has not been saved, you may lose it as a result of forced disconnection. ViPNet SafeDisk 3.3. User's Guide | 31 Uninstalling ViPNet SafeDisk Before starting uninstalling ViPNet SafeDisk: 1 2 Make backup copies of all your protected information. To do this, either: o copy a container file and a corresponding backup copy of this container’s keys to the same secured location; o create container export files for all your containers and copy them to the secure location. If you do not want to leave any traces of confidential information on your computer: o Use ViPNet SafeDisk cleaning features (see Removing Traces of Secure Data on Your Computer on page 138). o Enable the Extreme Danger mode (see Destroying Confidential Information. Extreme Danger Mode on page 134) and destroy all your containers and container keys. To uninstall ViPNet SafeDisk: 1 Exit the program (see Finishing the Work with ViPNet SafeDisk on page 29). 2 On the Start menu, click Settings, then Control Panel, then Programs and Features. 3 In the programs list, double-click ViPNet SafeDisk. The Add/Remove Wizard will launch. 4 Select Remove All Components. Click Next. 5 Click Finish. The message warning about the remaining containers will be displayed: Figure 12: Warning about files remaining in the program folder 6 If you need to keep working with the containers in future, click No. If you click Yes, all information will be deleted. ViPNet SafeDisk 3.3. User's Guide | 32 7 To complete ViPNet SafeDisk uninstallation, restart your computer. To restart the computer immediately after installation, click Yes. Figure 13: The restart computer message If you want to restart the computer later, click Restart Later. ViPNet SafeDisk 3.3. User's Guide | 33 3 Getting Started with ViPNet SafeDisk Launching ViPNet SafeDisk for the First Time 35 Setting a User Password 37 Changing a User Password 40 ViPNet SafeDisk 3.3. User's Guide | 34 Launching ViPNet SafeDisk for the First Time Upon you have successfully installed SafeDisk onto your computer, you are ready to begin protecting your confidential information. However, to actually start protecting your information, more required steps should be taken. These steps include: launching ViPNet SafeDisk (it will be the first time you launch the program), setting your user password. To launch ViPNet SafeDisk for the first time: 1 Start the program (see Starting ViPNet SafeDisk on page 28). The Password of SafeDisk user window will be shown. Figure 14: Creating a password for a SafeDisk users 2 Set your user password as described in the Creating a User Defined Password (on page 37) and Generating a Random Password (on page 37) topics. 3 Click OK. The main ViPNet SafeDisk window will be shown. ViPNet SafeDisk 3.3. User's Guide | 35 4 Proceed as described in the Protecting Information with ViPNet SafeDisk (on page 57) chapter. ViPNet SafeDisk 3.3. User's Guide | 36 Setting a User Password Your user password is required to log onto ViPNet SafeDisk. That is why we recommend you to set a secure password. To achieve this, you can use the Create a random password feature (see Generating a Random Password on page 37) or specify a password yourself (see Creating a User Defined Password on page 37). Warning: If you lose your user password, it will be impossible to gain access to information protected by ViPNet SafeDisk. Creating a User Defined Password 1 In the Password of SafeDisk User window, in the Password Type list, select User Defined. 2 In the Enter password box, type your password. In the Confirmation box, retype it. 3 Click OK. Note: As you are creating a password, you can use any uppercase or lowercase letters, numerals and other characters. Tip: We strongly recommend you not to use your private information (name, last name, date of birth, telephone number) as your password, and simple passwords as well (for example, “qwerty”, “asdfgh” and so on). Generating a Random Password 1 In the Password of SafeDisk User window, in the Password type list, choose Random. ViPNet SafeDisk 3.3. User's Guide | 37 Figure 15: Choosing the “random” password type 2 Digital Roulette (on page 174), a random number generator, will be launched. To create a random key or password, random numbers are required. During your ViPNet SafeDisk sessions, Digital roulette is automatically launched when the first random number is required. Figure 16: Digital Roulette 3 Follow the instructions in the Digital Roulette window. A random password will be generated. If you want to use another password, click Another. Tip: A password phrase helps to remember the password. Passwords are generated from several initial letters of each word in a password phrase. For example, if you type three initial letters of each word in a password phrase “navigator educates cactus”, you will get a password “naveducac”. ViPNet SafeDisk 3.3. User's Guide | 38 Changing How Random Passwords Are Generated To change your random password settings: 1 In the Password of SafeDisk User window, click Options. The Random passwords options window will be shown. Figure 17: Random password options 2 o In the Password phrase language list, choose English, German, French, Spanish or Russian. o In the Words in password phrase and Letters used lists, select the necessary numbers. To save your changes, click OK. ViPNet SafeDisk 3.3. User's Guide | 39 Changing a User Password To increase security, we recommend you to change your password from time to time. Warning: If you have made configuration backup copie (see Creating a Configuration Backup Copy on page 109) before changing your password and you are planning to use them, remember your previous password. To change user password: 1 On the Security menu, select Change Password. 2 If there are any connected containers, you will be requested to disconnect them. 3 The Password of SafeDisk User window will appear. 4 Create a new password (see Setting a User Password on page 37). Next time you log onto ViPNet SafeDisk, use your new password. ViPNet SafeDisk 3.3. User's Guide | 40 4 Registering ViPNet SafeDisk Before You Begin 42 Buying the Program (Getting a Serial Number) 44 Requesting a Registration Code 45 Registering ViPNet SafeDisk 53 System Administrator Actions for Registration Using a File 56 ViPNet SafeDisk 3.3. User's Guide | 41 Before You Begin Why You Need to Register When you have installed ViPNet SafeDisk on your computer, ViPNet SafeDisk will run in the demo mode. You can register ViPNet SafeDisk anytime. All restrictions will be removed, the period of using your ViPNet SafeDisk will never expire. That is why we recommend you the following workflow: install ViPNet SafeDisk, configure your fully-functional demo ViPNet network and evaluate it freely; to use a fully-functional version, register your ViPNet SafeDisk. Beginning Registration You can register ViPNet SafeDisk on your own (usual registration). To do this, follow the instructions below. If you are a system administrator and would like to register several copies of the program, you can perform registration using a file. This registration type allows you to gather registration requests from all the users, send these requests as one e-mail message and receive all the registration codes at once. For more information, see System Administrator Actions for Registration Using a File (on page 56). Note: If you install ViPNet SafeDisk on a computer, and the program was registered on this computer before, you can use registration data previously saved in a *.brg file (see Saving Registration Data on page 55). If you have modified configuration of the computer on which ViPNet SafeDisk is installed, see If the Configuration of Your Computer Has Been Changed (on page 55). To register ViPNet SafeDisk: 1 In the ViPNet SafeDisk window, on the Help menu, click Registration. The Registration of ViPNet SafeDisk wizard will be launched. ViPNet SafeDisk 3.3. User's Guide | 42 Figure 18: The Registration of ViPNet SafeDisk Wizard 2 If you have: o not yet purchased ViPNet SafeDisk, select Buy program (get serial number) (see Buying the Program (Getting a Serial Number) on page 44). Note: If you have bought ViPNet SafeDisk on a compact disk, you already have a serial number (it is supplied with the compact disk) and you can go to the registration code request (see below). o purchased ViPNet SafeDisk and have a serial number, select Request registration code (see Requesting a Registration Code on page 45). Note: If you request your registration code online, your ViPNet SafeDisk registration will be done automatically (no user interference required). o 3 purchased ViPNet SafeDisk and received your registration code, select Register program (see Registering ViPNet SafeDisk on page 53). Click Next. ViPNet SafeDisk 3.3. User's Guide | 43 Buying the Program (Getting a Serial Number) To buy a serial number: 1 On the Registration of ViPNet SafeDisk, choose Buy program (get serial number) and click Next. The ViPNet products order page on the Infotecs website will be displayed in your default Internet browser. After using the website to successfully buy ViPNet SafeDisk, you will receive a serial number by email. 2 Upon receiving a serial number, return to the Registration of ViPNet SafeDisk (see Beginning Registration on page 42) and request a registration code (see Requesting a Registration Code on page 45). ViPNet SafeDisk 3.3. User's Guide | 44 Requesting a Registration Code To request a registration code for ViPNet SafeDisk: 1 On the Registration of ViPNet SafeDisk page, choose Request registration code and click Next. 2 On the Registration request options page, choose the means of requesting your registration code. To do this, choose one of the following options: o On the Internet (online) (see Requesting Your Registration Code on the Internet (Online) on page 45). o By email (see Requesting Your Registration Code by Email on page 48). o By phone (see Requesting Your Registration Code by Phone on page 49). o Using file (see Receiving Your Registration Code from the Administrator on page 51). Figure 19: Choosing the way to register your ViPNet SafeDisk 3 Click Next. Requesting Your Registration Code on the Internet (Online) ViPNet SafeDisk 3.3. User's Guide | 45 Warning: For requesting a registration code on the Internet you need an Internet connection. If you select On the Internet (online), the Registration data page will be displayed. Figure 20: The Registration data page On the Registration data page: 1 In the Serial number box, type your serial number. Note: If you do not have a serial number, make request to purchase it (see Buying the Program (Getting a Serial Number) on page 44). If you have ever previously typed your serial number in this box, your serial number will be entered automatically. 2 In the User name box, type your name to be used when issuing your license and contacting you. This box is optional. By default, the user name you have typed at the ViPNet SafeDisk installation will be displayed. 3 In the Company box, type your company name. This box is optional. By default, the company name you have typed at the ViPNet SafeDisk installation will be displayed. 4 In the Email box, type your e-mail address which will be used to contact you in case of need. ViPNet SafeDisk 3.3. User's Guide | 46 Warning: We will not sell, distribute or lease your e-mail addresses. We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect from you. 5 In the Additional information box, feel free to type any additional information. For example, you can type here how to contact you or post some problems or suggestions on ViPNet registration utility or ViPNet software in the whole. In the Computer code box, a code that uniquely identifies your computer is displayed. You cannot change this value. 6 Click Next. The page, showing your registration request status, will be displayed. On this page you will also see how much time elapsed since you had begun your registration request. Please note, that you have no more than three minutes to complete your online registration request. Figure 21: Waiting for a response from the Infotecs registration server If within the three minutes a connection to the Infotecs registration server is not established, the corresponding message will be displayed. Figure 22: The message about connection failure ViPNet SafeDisk 3.3. User's Guide | 47 When a connection to the Infotecs registration server is established successfully but you have supplied incorrect data, the message informing you about it will also be displayed. Click OK to return to the Registration data page. If you are refused in registration, you will also be returned to the Registration data window. In this case, you need to check your serial number and try to register again. If online registration was successful the Registration of ViPNet SafeDisk was successful page will be displayed. This page will also display some suggestions on how to securely backup your registration data (see Saving Registration Data on page 55). 7 Click Finish. Requesting Your Registration Code by Email Warning: For requesting a registration code on the Internet you need an Internet connection. If you select By email, the Registration data page will be displayed. On the Registration data page: 1 Provide all your data as described in Requesting Your Registration Code On the Internet (Online) (on page 45). 2 Click Next. An email summarizing your registration data will be automatically opened in your default email application. It will be addressed to [email protected]. ViPNet SafeDisk 3.3. User's Guide | 48 Figure 23: Requesting your registration code by email Warning: We do not recommend you to modify anything in this auto-generated email. 3 To complete the procedure, send this email. When Infotecs has checked your registration data, you will receive your registration code in response. Warning: If you do not receive a response e-mail from Infotecs for a long period of time, you may try to resend your email. To do this, repeat all steps described in this topic. If you still cannot register your ViPNet SafeDisk, contact Infotecs Support Team. 4 Upon receiving a response email with registration code, register your ViPNet SafeDisk (see Registering ViPNet SafeDisk on page 53). Requesting Your Registration Code by Phone If you select By phone, the Registration request by phone page will be displayed. ViPNet SafeDisk 3.3. User's Guide | 49 Figure 24: Requesting your registration code by phone This page displays all the data you need to tell Infotecs. 1 Call Infotecs on the phone number specified at the top of the window and request a registration code. 2 When you receive the registration code, click Next. The Register page will be displayed. Figure 25: The Register page 3 On the Register page type your serial number and registration code, then click Next. ViPNet SafeDisk 3.3. User's Guide | 50 Note: If you have ever previously typed your serial number in this box, your serial number will be entered automatically. If you provided correct data, the Registration of ViPNet SafeDisk was successful page will be displayed. This page will also display some suggestions on how to securely backup your registration data (see Saving Registration Data on page 55). 4 Click Finish. Receiving Your Registration Code from the Administrator The idea behind registering using a file is to delegate the registration code receiving process to your ViPNet network administrator. This means that you personally do not request your registration code from Infotecs. Instead you use the Registration of ViPNet SafeDisk Wizard to collect your registration data and then pass it to your ViPNet network administrator. Note: If you would like to register only one copy of ViPNet SafeDisk using a file, first complete actions 1–6 described in this chapter and then follow the instructions given in the chapter System Administrator Actions for Registration Using a File (on page 56). Then, complete the step 7 to register your copy of ViPNet SafeDisk (see Registering ViPNet SafeDisk on page 53). It is your ViPNet network administrator, who collects your and other ViPNet users’ registration data and sends it to Infotecs. It is your ViPNet network administrator, who obtains your and other ViPNet users’ registration codes and then passes them to you and your fellow ViPNet users. Upon receiving your registration code from your ViPNet network administrator you can register your ViPNet SafeDisk. To register your ViPNet SafeDisk using a file: 1 On the Registration request options page, choose Using file. The Registration data page will be displayed. 2 Provide all your data as described in Requesting Your Registration Code on the Internet (online) (on page 45). Click Next. 3 On the Saving registration data page, click Browse and select the folder that will store the file containing your registration data. ViPNet SafeDisk 3.3. User's Guide | 51 Figure 26: Saving registration data to a text file 4 Click Next. The registration data is saved in a text file named after the serial number of the program: <serial number>.txt. Figure 27: Further instructions on registration using a file 5 Click Finish. 6 Send the file containing your registration data to your system administrator. 7 When you receive your registration code from your system administrator, register your ViPNet SafeDisk (see Registering ViPNet SafeDisk on page 53). ViPNet SafeDisk 3.3. User's Guide | 52 Registering ViPNet SafeDisk Upon receiving registration code from Infotecs, you can register your ViPNet SafeDisk. To do this: 1 Launch the Registration of ViPNet SafeDisk (see Beginning Registration on page 42). 2 On the first wizard page, choose Register program and click Next. 3 On the Serial number page, type your serial number. Figure 28: Typing your serial number when registering your ViPNet SafeDisk Note: If you have ever previously typed your serial number in this box, your serial number will be entered automatically. 4 On the Registration Code page: o you personally sent a request for a registration code, select Single registration and type the registration code. o your system administrator sent a request for a registration code, select Using file, click Browse and locate the file on your network that contains the registration code. ViPNet SafeDisk 3.3. User's Guide | 53 Figure 29: Choosing registration type and typing registration code 5 Click Next. If you provided correct data, the Registration of ViPNet SafeDisk was successful page will be displayed: Figure 30: Registration completed successfully 6 Click Finish. 7 Back up your registration data (see Saving Registration Data on page 55) by copying your registration file to a secure location. The file offmanager.brg is located in the same folder as the ViPNet SafeDisk application. ViPNet SafeDisk 3.3. User's Guide | 54 Saving Registration Data The registration process saves registration data to the *.brg file, which is created in one of the following folders: C:\ProgramData\InfoTeCS\ViPNet SafeDisk\ for the operating systems Windows Vista, Windows 7 and Windows Server 2008; С:\Documents and Settings\All Users\Application Data\InfoTeCS\ViPNet SafeDisk\ for the operating systems Windows XP and Windows Server 2003. Note: The name of the *.brg file depends on the ViPNet program version. We recommend you to save this file in a secure place because it will be useful in some cases of re-installation (for example, if you need to install the program into another folder on your computer, or you need to re-install the program after formatting your hard drive). In such cases, you should unload the program, move the saved *.brg file back into the folders mentioned above, and then start the program anew. Upon start, ViPNet SafeDisk will be registered automatically (as long as the registration data are valid and the configuration of your computer has not changed). Registration data (serial number, computer code, registration code, and more) is also stored in a registration log file named reginfo.txt, located in the ViPNet SafeDisk installation folder. You can use nformation from this file for manual registration of the program after re-installation (for example, if the *.brg file has been lost). If the Configuration of Your Computer Has Been Changed Changes in computer configuration may influence the work of ViPNet Manager installed on this computer. If your upgrade was substantial (you replaced almost all hardware in your PC) you will need to register your ViPNet Manager once again (see Requesting a Registration Code on page 45). If you made only minor changes to your computer’s configuration, you will not have to register your ViPNet Manager again. At the first ViPNet Manager startup after minor upgrade the message will be displayed informing you that your computer’s configuration has been changed and a new *.brg file has been created. This means that your previous registration data became obsolete. You will not be able to register your ViPNet Manager using those data after its reinstallaion. That is why you should copy this updated *.brg file into the secure location. If you reinstall ViPNet SafeDisk on this computer, you should copy this very file to the ViPNet SafeDisk installation folder. Only after that the application will consider itself registered. ViPNet SafeDisk 3.3. User's Guide | 55 System Administrator Actions for Registration Using a File Registration using file allows a company to request and receive registration codes for several users via a single person. This person is normally the organization's system administrator. To register using file, all ViPNet users must have their product's serial number. If not, they need to buy it via the Registration of ViPNet SafeDisk (see Buying the Program (Getting a Serial Number) on page 44). Each user, from their computer, should have created a using file registration request (see Receiving Your Registration Code from the Administrator on page 51). This creates a *.txt file containing registration data, which they will send to their system administrator. If you are a system administrator: 1 Save the files obtained from ViPNet users and containing their registration data to the same folder. 2 When you have them all, combine them using the copy command: copy *.txt registration.all. You can use another file name instead of registration.all. 3 Email the file to Infotecs at [email protected]. Name the email “ViPNet Registration Using File”. 4 After Infotecs JSC has processed the request, you will receive an email with an attached *.txt file. This file will contain registration codes for all users taking part in the group registration. Deliver this file to users (for example via network disk) who can then register their installed ViPNet program. ViPNet SafeDisk 3.3. User's Guide | 56 5 Protecting Information with ViPNet SafeDisk Checklist: Protecting Your Information 59 Creating a Container 60 Backup Copy of Container Keys 68 Connecting a Container 72 Formatting a Container 77 Common Workflow When Protecting Your Sensitive Information 79 Disconnecting a Container 81 Viewing and Changing Container Properties 83 Updating Container Keys 86 Changing Container File Location 88 Deleting a Container 89 ViPNet SafeDisk 3.3. User's Guide | 57 Configuring ViPNet SafeDisk 90 ViPNet SafeDisk 3.3. User's Guide | 58 Checklist: Protecting Your Information To successfully protect your sensitive information and provide a fault tolerant access to this information, you should successfully complete all the tasks in the following check list. Note: This parent checklist contains links to subordinate checklists. Upon finishing the subordinate checklist you should return to this parent checklist and advance to the next task. When a reference link takes you to a conceptual topic, return to this checklist after you review the conceptual topic so that you can proceed with the remaining tasks. Task Reference Create container(s) Creating a Container (on page 60) Create backup copy (s) of container keys Creating a Backup Copy of Container Keys (on page 69) Regularly create a full configuration backup copy Restoring Access to All Containers by Restoring Configuration (on page 109) Regularly create a container export file Exporting a Container (on page 95) Prepare to work under malicious user control Checklist: Preparing to Work in Insecure Environment (on page 129) Always perform secure cleaning to remove traces of all your sensitive information Checklist: Cleaning Secure Data (on page 142) Tip: We recommend you to print this checklist and select the check boxes as you advance through the tasks outlined in this checklist. ViPNet SafeDisk 3.3. User's Guide | 59 Creating a Container When you run ViPNet SafeDisk for the first time or there are no created containers, the Create Container wizard will be launched automatically as soon as the ViPNet SafeDisk main window is shown. If you are using free edition of ViPNet SafeDisk and already have created a container, the message about limitations of your SafeDisk copy will be displayed. Figure 31: The Limitations of ViPNet SafeDisk free edition message To create a new container, either delete the container that already exists (see Deleting a Container on page 89) or register ViPNet SafeDisk (see Registering ViPNet SafeDisk on page 41). To create a new container: 1 Do one of the following: o on the toolbar, click Create ; o on the Container menu, select Create; o press Insert. The Create Container wizard will be launched. 2 On the Create a New Container page, click the Browse button and specify the name and location of the new container file. Or you can use the name and location offered by default. ViPNet SafeDisk 3.3. User's Guide | 60 Figure 32: Creating a new container Click Next to continue. 3 On the Container properties page: o In the Container size box, specify the size of the container you are going to create. o When specifying your container’s size, pay special attention to the following: You cannot create a container of the size less than 1024 Kb (1 Mb) and more than 2048 Gb. You cannot format a container in the NTFS file system if its size is less than 3 Mb. You cannot format a container in the FAT file system if its size is more than 2048 Mb (2 Gb). You cannot format a container in FAT32 if its size is less that 32 Mb and is more than 4095 Mb (4Gb). Note: You will choose the type of the file system for your container later, when formatting this container. However, we encourage you to think about your container size and the file system it will use at this step. The formatting process may take several minutes or several hours depending on the container size and computer performance. ViPNet SafeDisk 3.3. User's Guide | 61 Figure 33: Specifying container properties o If you create a container using an external device, you can use the whole device's memory for this container. If you select the Allocate all disk space for this container check box, specifying the container size is not required, because the container size will be equal to the external device’s memory. If you select this check box, all the data stored on the external device will be deleted permanently. That is why we recommend you to save the backup copies of your data first, and clean the external device’s memory before creating a container. o In the Encryption algorithm list, choose the algorithm that will be used to encrypt the created container. You can choose from AES or GOST. Note: AES and GOST are symmetric encryption algorithms. The AES algorithm is the federal encryption standard in the USA. The GOST algorithm is the standard in Russian Federation. o In the Container comments box, type any comments you like. These comments will be displayed in the main ViPNet SafeDisk window in the column to the right of the container name. These comments will help you find the desired container in the list, so make them concise, clear and meaningful. o Select the Automatically connect container after logon to ViPNet SafeDisk check box, if you want the new container to be connected automatically when ViPNet SafeDisk starts. ViPNet SafeDisk 3.3. User's Guide | 62 Tip: If you do not select the Automatically connect container after logon to ViPNet SafeDisk check box on this step, later you can select it in the container properties. Click Next. 4 On the Type of access to container page, specify how you will be granted access to the new container. This means that your container will be protected by the option you select and to access it you will be asked to confirm that you are authorized to access this container. Figure 34: Choosing password as a type of access to the container You can choose one of the following options: o Password. The container you create will be protected by the password used for logging on to SafeDisk. o Key File. The container you create will be protected by the password used for logging on to SafeDisk and a key file. If you choose this type of access, specify the key file’s name and location. To access this container later you will be prompted to present a valid key file. If you have chosen Key file as your type of access to this container, you should complete the following additional steps: Click the Browse button and, in the Creating key file window, navigate to the folder where you want to save your key file. You can use any name and extension you like for your key file. ViPNet SafeDisk 3.3. User's Guide | 63 Warning: To increase security, we recommend you to use removable media to store your key file. Remember, if you lose your key file, it will be impossible for you to access the container, which uses this key file as its access type. In addition, if the key file became corrupted, the only way to restore access to your container would be to use one of the previous backup copies of container keys. That is why, we strongly recommend you to create a backup copy of container keys every time you create new container. See Creating a Backup Copy of Container Keys (on page 69) for more information. Figure 35: Choosing key file as a type of access to the container o External device. The container you create will be protected by a password used for logging on to SafeDisk and an external device inserted in a slot. To access this container later you will asked to present a valid external device. If you have chosen External device as your type of access to this container, you should complete the following additional steps: Insert the external device in a slot. In the Choose device list, choose a token, supported by your system. Note: Your external device’s drivers and other required software should be correctly installed on your computer. If you do not see your device in the Choose device list, your device’s software failed to install correctly. Consult your external device’s documentation on how to install and configure your ViPNet SafeDisk 3.3. User's Guide | 64 device’s drivers for your version of Windows. For details, see Supported External Storage Devices (on page 164). In the Type PIN box, type a PIN (person identification number) you used to access the chosen device. Select the Save PIN check box if you do not want to enter PIN every time you connect the container protected by the chosen device. Note: To increase security, do not select the Save PIN check box. Consult your device’s documentation on how set PIN and to configure other device’s properties. Figure 36: Choosing external device as a type of access to the container 5 Upon finishing, click Next. The Digital Roulette window will be displayed (in case it has not been launched before during the current session of ViPNet SafeDisk). ViPNet SafeDisk 3.3. User's Guide | 65 Figure 37: Digital Roulette Follow the instructions in the Digital Roulette window. As a result container keys will be generated. 6 On the Finishing Container Creation page, click Finish. If you have left the Create a backup copy of container keys check box selected, the Creating Backup Copy of Container Keys wizard (see Creating a Backup Copy of Container Keys on page 69) will be launched automatically. If you have cleared this check box, your newly created container will be automatically connected and you will be prompted to format it. Figure 38: Completing container creation As a result a hidden container file *.sdc (see Container file on page 174) will be created. To display this file, in Control Panel open Folder Options and, on the View tab, select the Show hidden files, folders, and drives check box. ViPNet SafeDisk 3.3. User's Guide | 66 Warning: In the current ViPNet SafeDisk version, you cannot use a file with the Compress or Encrypt attribute (see Compress or Encrypt Attribute Is Set for the Container File on page 159) as a container. ViPNet SafeDisk 3.3. User's Guide | 67 Backup Copy of Container Keys A backup copy of container keys is required in the following cases: you cannot access your container; however, the container file itself remains undamaged; the key file you have chosen as the type of access to this container became corrupted; upon converting the container into the new format, you cannot access the container created in an earlier version of ViPNet SafeDisk; upon updating keys, you cannot access the container; you decided to grant access to your container to another user registered on your computer; you decided to copy the container file (*.sdc) manually (do not use the ViPNet SafeDisk container export feature). Warning: Using a backup copy of container keys, you will be able to restore access to the corresponding container only if these container’s keys were damaged. If a container file itself is damaged, there is no other way to restore your protected information stored in this container as to import the container file (if the corresponding container export file has been created beforehand). That is why we strongly recommend you to regularly created full backup copies of all your container files (see Exporting a Container on page 95). Starting a Wizard for Creating a Backup Copy of Container Keys If you are creating a backup copy of container keys afterwards, to run the Creating Backup Copy of Container Keys wizard: 1 In the main ViPNet SafeDisk window, choose the container you want to create a backup copy of container keys for. 2 If the container is connected, disconnect it (see Disconnecting a Container on page 81). 3 Do one of the following: o On the Container menu, select Backup Copy of Container Keys. ViPNet SafeDisk 3.3. User's Guide | 68 o Right-click the container and, on the context menu, select Backup Copy of Keys. The Creating Backup Copy of Container Keys wizard will be launched. Creating a Backup Copy of Container Keys 1 On the Create a Backup Copy of Container Keys page (see Backup copy of container keys on page 173), click Next. 2 On the Storage location of the backup copy of container keys page: o If you want to save a backup copy in a file on your computer, choose File from the Protection type list. Figure 39: Saving a backup copy in a file Click the Browse button and specify the folder to the container keys backup copy in. You can always use the folder specified by default. Upon finishing, click Next. Tip: For security reasons, do not store your backup copy of container keys in the same folder as a container file itself (perhaps an external device would be a better choice). o If you want to save the backup copy on an external device: Choose External device from the Protection type list. ViPNet SafeDisk 3.3. User's Guide | 69 In the Backup copy of container keys name box, specify the name of your backup copy. Connect your external device to the computer or reader. In the Choose device list, choose the device you are going to use (if it has not been chosen automatically). In the Type PIN box, type the PIN for your device. To save the PIN, select the corresponding check box. Click Next. Figure 40: Saving a backup copy on an external device 3 Type the password for further access to the backup copy and confirm it. ViPNet SafeDisk 3.3. User's Guide | 70 Figure 41: Setting a user password 4 To complete the creation of a backup copy of container keys, on the Backup Copy of Container Keys Creation Completed page, click Finish. As a result, a file with SDE extension containing your container keys backup copy will be created or your container keys backup copy will be saved on an external device. ViPNet SafeDisk 3.3. User's Guide | 71 Connecting a Container When you are working with a newly created container, after creating a backup copy of its keys you will be suggested to connect the container. If you are connecting an already existing container (perhaps, you started new ViPNet SafeDisk session), see Connecting an Existing Container (on page 75). To connect a container: 1 Either: o In the Connecting Container window, click Yes. Figure 42: A prompt to connect a container o 2 In the ViPNet SafeDisk main window, choose a container you would like to connect, and then do one of the following: On the toolbar, click Connect On the Container menu, select Connect. Right-click the container and, on the context menu, select Connect. Press C. . In the Connecting Container window: ViPNet SafeDisk 3.3. User's Guide | 72 o In the Connect container as disk list, choose a drive letter which will be assigned to your container by the Windows operating system. Figure 43: Connecting a container o Select the Open container contents check box, if you want to display container’s contents in a separate window, o Select the Connect container for read only check box, if you do not want the container to be edited this session. Note: If you are connecting a newly created container do not select the Connect container for read only check box, for it will be impossible for you to format it. If you have selected this check box anyway, either disconnect it and try to reconnect it or create the container anew and this time leave this check box cleared. o If you work under Windows XP or Windows Server 2003 and you want to protect the container against other users’ access, select Exclusive access. Figure 44: Enabling exclusive access Note: If you select the Exclusive access check box, you cannot connect container for read only. ViPNet SafeDisk 3.3. User's Guide | 73 3 Click OK. 4 If you are connecting the container you have just created, you will be offered to format it. Connecting a Container Using a Key File 1 In the Connecting Container window (see figure on page 72), click Yes. 2 If your key file has been moved from the location, which has been specified at the time of this container’s creation, the Key File of container window will be shown. Figure 45: Specifying location of a key file In the Key File of container window, click the button and navigate to the folder where you have placed the key file to this container. Then click OK. If you have not moved the key file, the window described above will not be shown. Note: If the key file for your container becomes corrupted (due to hard disk damage, or malicious users intent) the only way for you to restore access to this container is to make use of the backup copy of container keys (see Creating a Backup Copy of Container Keys on page 69) and then import this container (see Importing a Container Using a Backup Copy of Container Keys on page 101). 3 In the next window (see figure on page 73), choose, how the container should be connected. Click OK to continue. 4 If you are connecting the container you have just created, you will be offered to format it. Connecting a Container with an External Device 1 In the Connecting Container window (see figure on page 72), click Yes. 2 Insert your token which you used when creating this container into the corresponding slot. ViPNet SafeDisk 3.3. User's Guide | 74 3 In the next window, in the Enter PIN box, type your PIN. Note: To increase security, do not select the Save PIN check box. Figure 46: Typing device's PIN when connecting a container 4 In the next window (see figure on page 73), how the container should be connected. Click OK to continue. 5 If you are connecting the container you have just created, you will be offered to format it. Connecting an Existing Container To connect a previously created container: 1 In the ViPNet SafeDisk main window, choose the container you want to connect. 2 Do one of the following: 3 o on the toolbar, click Connect , o on the Container menu, click Connect, o press C. Depending on the type of access you have chosen for the selected container, either: o if you have chosen a password as a protection type for this container, proceed to the next step; o if you have chosen a key file as a protection type and this file can no longer be found in the specified location, specify a path to the key file (see Connecting a Container Using a Key File on page 74). ViPNet SafeDisk 3.3. User's Guide | 75 o if you have chosen an external device as a protection type, present a valid external device (see Connecting a Container with an External Device on page 74). 4 In the Connecting Container window (see figure on page 73), choose how your container should be connected, and then click OK. 5 The connected container will be opened in a new window. Now you can work with protected information stored on this container. ViPNet SafeDisk 3.3. User's Guide | 76 Formatting a Container Before using a container, you need to format it. If you connect a container that has not been formatted yet, then the Format Container wizard will start. To format a container: 1 On the first page, in the File system list, choose the file system for formatting. Note: The choice of the file system depends on the container size: You can choose FAT if your container size is more than 1 MB and less than 2 GB. You can choose FAT32 if your container size is more than 32 MB and less than 4 GB. You can choose NTFS if your container size is more than 3 MB. Figure 47: Formatting a container 2 Click Next to begin the formatting process. Note: The formatting process can take you several minutes or several hours depending on the container size and the computer performance. ViPNet SafeDisk 3.3. User's Guide | 77 3 Upon the formatting process is finished, on the last page of the wizard, click Finish. Container is ready and connected. ViPNet SafeDisk 3.3. User's Guide | 78 Common Workflow When Protecting Your Sensitive Information Once you have created all containers, we recommend you to use the following workflow to protect your sensitive information on an everyday basis: 1 Start ViPNet SafeDisk (see Starting ViPNet SafeDisk on page 28). 2 In the main ViPNet SafeDisk window, choose the container with your information. 3 Connect the chosen container by clicking Connect . The Connecting Container window (see figure on page 73) will be shown. Specify connection parameters, and then click OK. For more information on how to connect a container see Connecting a Container (on page 72). 4 Double click the connected container. Now you can work with the container disk as you usually work with Windows disks. Save documents and files you want to protect to this disk or save changes to files stored on this disk. Note: Before you start working with container, read the chapter Container Access Security (on page 119). 5 When you want to finish working with protected information, deny access to it by closing all the files stored in the container and closing the Explorer window listing the container files. In the main window, choose the container and click Disconnect . When you disconnect the container, the access to your protected information is blocked and any evidence of such information on your computer will be hidden. 6 Close ViPNet SafeDisk (see Finishing the Work with ViPNet SafeDisk on page 29). ViPNet SafeDisk Container Icons The table below describes ViPNet SafeDisk container icons and their meaning and purpose. ViPNet SafeDisk 3.3. User's Guide | 79 Table 3. ViPNet SafeDisk container icons ViPNet SafeDisk container icon Description and guidelines Container is ready but not connected. Container is ready and connected. You can work with it as with common Windows disk. Container has been created but now not available (perhaps the container file was placed on a remote drive which is now not accessible). Container is damaged. Either container file or container protection key is damaged. For more information, see Restoring Access to Protected Information (on page 105). ViPNet SafeDisk 3.3. User's Guide | 80 Disconnecting a Container Containers should be disconnected to hide your protected information. Moreover, you can perform some actions only when your container is disabled, for example, change the container properties, export the container, or create a container keys backup copy. To disconnect a container: 1 In the main window, choose the container to be disconnected. Connected containers are displayed as , disconnected ones — as . Figure 48: Connected and disconnected containers 2 Close all the files stored in this container and close the Explorer window which shows the container files. 3 In the main window, do one of the following: o on the toolbar, click Disconnect ; o right-click the container and, on the context menu, select Disconnect; ViPNet SafeDisk 3.3. User's Guide | 81 o on the Container menu, select Disconnect; o press D. If you need to disconnect all the containers at once, either: 4 o on the toolbar, click Disconnect All ; o on the Container menu, select Disconnect All; o press Alt+D. If for some reason you cannot disconnect your container (for example, the files stored in the container are being used by some other application), the corresponding warning will be displayed. To force your container disconnection, in the warning window, select the Force disconnection and click Retry. Warning: When you force your container disconnection, the opened documents would not close. You have to close them manually. Tip: To disconnect all the containers immediately when malicious users approach, enable the Danger mode (see Immediate Denial of Access to Protected Information. Danger Mode on page 131). ViPNet SafeDisk 3.3. User's Guide | 82 Viewing and Changing Container Properties To view and (or) change the properties of a container: 1 In the main ViPNet SafeDisk window, choose a container and disconnect it (see Disconnecting a Container on page 81). 2 Do one of the following: 3 o on the toolbar, click Properties ; o on the Container menu, select Properties; o right-click the container and, on the context menu, select Properties; o press Alt+Enter. In the Container properties dialog box, on the Container tab, configure the selected container’s general options. You can: o Change the name and the location of the container file (see Changing Container File Location on page 88). o Write your comments for the selected container. o Select or clear the Automatically connect container after logon to ViPNet SafeDisk check box. o Prevent the contents of the selected container from being modified (the Connect container for read only check box). ViPNet SafeDisk 3.3. User's Guide | 83 Figure 49: Viewing and changing container’s properties On the Container tab, you can also view the container keys creation date and update these keys (see Updating Container Keys on page 86) when needed by clicking Update keys. Note: You cannot change container’s size and encryption algorithm. 4 In the Container properties dialog box, on the Protection type tab, configure how the selected container is protected. Figure 50: Configuring protection type for the selected container To configure protection type of the selected container, in the Container protection type list, choose either: ViPNet SafeDisk 3.3. User's Guide | 84 o Password. This means that the password you used to log on to ViPNet SafeDisk will be enough to access this container. o Key file. This means that to access this container you will need the password you used to log on to ViPNet SafeDisk and a keys file. Provide a path to the key file. Warning: To increase security we recommend you to use removable media to store your key file. o External device. This means that to access this container you will need the password you used to log on to ViPNet SafeDisk and an external device inserted in one of the available slots. Depending on the external device you use you may be asked to provide the PIN (personal identification number) to access the device. In the Choose device list, choose a desired token. Then, in the Type PIN box, type your PIN for the chosen token. Note: ViPNet SafeDisk supports several types of external devices. For more information on external devices, see Supported External Storage Devices. 5 Upon finishing, click OK to save your changes. Click Cancel if you do not want to save any changes you have made. ViPNet SafeDisk 3.3. User's Guide | 85 Updating Container Keys To increase the security of information stored in ViPNet SafeDisk containers you can update your container keys, in other words the keys that are used to encrypt information stored in your container. After the container keys are updated, you cannot access your container using old keys or the old keys backup copy. We recommend you to update your container keys at least once in 15 months. You can view the container keys creation date in the Container properties dialog box (see figure on page 84), on the Container tab. To update the container keys: 1 In the main ViPNet SafeDisk window, choose the container you want to update the container keys for. 2 Do one of the following: o On the Container menu, select Update Keys. o Right-click the container and, on the context menu, select Update Keys. Figure 51: Update container keys o In the Container properties dialog box (see figure on page 84), on the Container tab, click Update keys. The Update Container Keys wizard will be started. 3 On the Update Container Keys page, click Next. The page with the updating process status bar will be displayed. To stop the process, click Stop. 4 Upon the container keys have been updated successfully, the Container keys updating completed page will be displayed. ViPNet SafeDisk 3.3. User's Guide | 86 Figure 52: Completing the container keys updating By default, on this page, the Create a backup copy of container keys check box is selected. To create your container keys backup copy later on, clear this check box. Warning: The container keys backup copy is intended for restoring access to your container in case its keys are damaged. Thus, we strongly recommend you to create your container keys backup copies. If you let some other users use your container keys backup copy to get access to the container on your computer (see Providing Access to Your Container for One or More Users on the Same or Different Computer on page 120) they will not be able to access your container after updating. For other users to access your container, provide them with the new keys backup copy. 5 To close the wizard, click Finish. ViPNet SafeDisk 3.3. User's Guide | 87 Changing Container File Location For your convenience, you can move container files to another folder, an external device, a remote network disk or write them on a CD. To move a container file to another folder, an external device or a remote network disk: 1 Open the container properties window. 2 In the Container properties window, on the Container tab, in the Container file box, specify a full path to the container file. 3 Click OK. A container file will be moved to the specified location. If you are going to work with a container on a CD, then, upon the container file has been written on a CD, specify the new path to the container file in the container properties window. A container written on a CD is available only for reading. Therefore, for a trouble-free work with this container, select the Connect container for read only check box. Warning: ViPNet SafeDisk can work only with the container files written on CDs of the ISO or ISO+Joilet format. ViPNet SafeDisk 3.3. User's Guide | 88 Deleting a Container Before deleting a container, make sure that you can restore information stored on this container in case of need. To do this, make sure, that either: the relevant container export file (*.sdx) is created, or the backup copy of container keys (*.sde) is created and is copied to secure location along with container file (*.sdc). Warning: If you have not created any of these files, you will not be able to restore information from a deleted container. If you want to delete a container: 1 Disconnect the container (see Disconnecting a Container on page 81) (if connected). 2 Select the container and then do one of the following: 3 o right-click it and select Delete; o on the Container menu, select Delete; o left-click the container and press Delete. In the Delete Container window, select the I really want to delete this container and I understand that it will be impossible to restore its contents check boxes. Figure 53: The message warning you about the deletion of the selected container 4 Click Delete container. ViPNet SafeDisk 3.3. User's Guide | 89 Configuring ViPNet SafeDisk To configure ViPNet SafeDisk general settings: 1 On the SafeDisk menu, click Options. The Options dialog box will be displayed. 2 In the navigation pane, click General. Figure 54: ViPNet SafeDisk general settings 3 If you need to run ViPNet SafeDisk automatically upon logon to Windows, select the Automatically run SafeDisk when Windows starts check box. 4 If you do not want to show the ViPNet SafeDisk icon in the notification area, clear the Show icon in the Windows notification area check box (selected by default). 5 To specify the period of standby after which containers will be disconnected automatically, select the Disconnect containers in case they are inactive within check box and type or select the necessary period (in minutes; the default standby period is 60 minutes). 6 For the Recent folder to be cleaned securely and automatically each session, select the Securely delete recent documents after container disconnection check box. 7 To change the key combination to maximize the main ViPNet SafeDisk window, click inside the Activate SafeDisk main window using the following shortcut key box and press the necessary keys. ViPNet SafeDisk 3.3. User's Guide | 90 8 To choose an action to be done after clicking the Close button in the main ViPNet SafeDisk window, in the When closing SafeDisk main window list, select Request action, Minimize window without exiting SafeDisk or Exit SafeDisk. 9 If you have made any changes, click Apply, then OK. Click Cancel to discard changes. ViPNet SafeDisk 3.3. User's Guide | 91 6 Exporting and Importing Protected Information Why Do You Need It? 93 Exporting a Container 95 Importing a Container to a PC 98 ViPNet SafeDisk 3.3. User's Guide | 92 Why Do You Need It? You may find it useful to work with your protected information not only at your working place but at other locations. For example, you went to dinner and decided to take some important report with you to finish it. To do this you should be able to transfer the container holding your protected information from your office computer to your personal laptop. ViPNet SafeDisk allows you to do this sort of thing. This operation is called exporting and can be useful both in the situation described above and for creating backup copies of your containers. Let us move a little further in our discussion. Suppose, you have exported your container to your laptop, finished your report and now you should send it to your boss or check it in into document versioning system. Suppose further, that you can do it only from your office computer (perhaps due to security reasons). To accomplish this task, you should move the finished report from your laptop to your office computer. Since your report contains very sensitive information, you cannot copy and paste it using standard tools (USB drive, diskette or other removable media). The report should remain encrypted. You can accomplish this task using ViPNet SafeDisk. To do this, you should use ViPNet SafeDisk on your laptop to export the container holding your report and use ViPNet SafeDisk on your office computer to import this container. The latter operation in ViPNet SafeDisk is called importing. As in the former example, you can use importing to restore your containers from backup copies. In addition, consider the following situation. You are going on vacation. However, some urgent changes to the project vision you created should be made during your vacation. Your project vision contains sensitive information and cannot be transferred openly to the person who is entitled to make changes to it while you are on vacation. To solve this issue you can also use ViPNet SafeDisk exporting and importing features. In short, to transfer your project vision to another person securely you should export your container and pass it along with the password you used when exporting it to this person. This person should import this container using the password you used when exporting this container. Upon completing this, the other person will be able to work with your protected information as if it was you yourself. Let us summarize business scenarios, where you can enjoy ViPNet SafeDisk exporting and importing features: backup and restore your sensitive protected information; transfer sensitive information between two or more computers (this scenario includes the data transfer over network (FTP, HTTP) or sending data with a courier; even if data being transferred is intercepted, it will be impossible to make anything out of it because it is encrypted); pass your sensitive information to another person while you are out of office; ViPNet SafeDisk 3.3. User's Guide | 93 upgrading the program to version 3.3.0. During the upgrading process, containers will be converted. We recommend you to export the containers before upgrading. This will allow you to work with the container in an earlier version of ViPNet SafeDisk. ViPNet SafeDisk 3.3. User's Guide | 94 Exporting a Container When you export a container you create a so called container export file. You should export a container, if you want to: create a backup copy of all your sensitive information stored in this container; transfer all your sensitive information with a courier, over a network or give it to your colleague while you are out of office. To export a container: 1 In the main ViPNet SafeDisk window, choose the container you want to export. If the container is connected, disconnect it (see Disconnecting a Container on page 81). 2 On the Container menu, click Export. 3 In the Export Container wizard, on the Export a Container page, specify the name and location of the container export file. Click the Browse button , to navigate to the folder where you want to save your container export file or use the file name and location offered by default. Then click Next. Figure 55: Exporting a container ViPNet SafeDisk 3.3. User's Guide | 95 Tip: To increase security, store your container export file in a different location than your container file (perhaps a removable media will be a good choice). 4 Type your password and confirm it. You will use this password when you try to import this container. Then click Next. Figure 56: Setting the password to a container export file 5 On the Container properties page, specify the properties of the container being exported: o Select the Open container for read only check box to prevent the exported container’s contents from being modified. o Select the Automatically connect container upon logging to ViPNet SafeDisk check box, if you want the exported container to be automatically connected when you import it. Click Next. ViPNet SafeDisk 3.3. User's Guide | 96 Figure 57: Specifying container properties for export 6 In the next window, click Finish. As a result of your actions a container export file *.sdx (see Container export file on page 173) will be created. This container export file contains both container file and backup copy of this container’s keys. Now you can transfer the container export file to another computer using a removable media, for example, a CD-ROM or a USB flash. You can also send it over a network (over FTP, HTTP, and so on). ViPNet SafeDisk 3.3. User's Guide | 97 Importing a Container to a PC Importing a Container from a Container Export File You should import a container from this container’s export file, if you want to: restore all your protected information from a backup copy; to work with your colleague’s sensitive data while he or she is on vacation or out of office. To import a container from a container export file you should have: container export file (*.sdx); password used for creating this container export file. To import a container from the container export file: 1 On the Container menu, select Import. The Import Container wizard will be displayed. 2 On the Import a Container page, choose File and click Next. Figure 58: Importing a container wizard ViPNet SafeDisk 3.3. User's Guide | 98 3 On the Protection password page, click the Browse button and specify the path to the container export file. For faster search, select the Export of SafeDisk container (*.sdx) file type from the Save as type list. Figure 59: Typing a password to access the selected export file 4 In the Type password box, specify the password which was used when exporting the container. Then click Next. 5 On the Container File page, specify the name and the location of the container file, in which the container you are currently importing will be placed. Figure 60: Specifying the container file location ViPNet SafeDisk 3.3. User's Guide | 99 6 If the container file specified on the previous step already exists, on the Created container already exists page, you should choose, whether you completely replace the existing container or you just want to replace keys of the existing container. Figure 61: Message informing you that the container you are trying to import already exists 7 If you do not want the container to be connected right after importing it, on the Container Importing Completed page, clear the Connect container check box. Click Finish. Figure 62: Completing container import ViPNet SafeDisk 3.3. User's Guide | 100 As a result of your actions a new container, which itself is a replica of the container being imported, will be created. This container will be displayed in the main ViPNet SafeDisk window. Importing a Container Using a Backup Copy of Container Keys You should import a container by means of a backup copy of its keys in the following cases: Container keys have been damaged. If the container file itself is undamaged, you can restore access to this container using backup copy of these container keys (see Restoring Access to Protected Information on page 105). You have used a key file as a protection type for your container. Unfortunately, the key file have been deleted or lost. To restore access to your container you should use the corresponding backup copy of container keys. Colleague of yours is out of office and you should finish some sensitive work for her. She allowed you to access her computer and created a different user in ViPNet SafeDisk (see Controlling Access to Protected Information. Registering a New User on page 116). You have acquired the container file (not the container export file) along with the backup of this container’s keys. Now you need to connect it to make some changes to sensitive information stored on this container. To import a container using a backup copy of container keys: 1 On the Container menu, select Import. The Import Container wizard will be started. 2 On the Import a Container page: o o If the container keys backup copy is saved in a file on your computer: Choose File and click Next. On the Protection password page, click the Browse button and specify the location of the container keys backup copy. For faster search, select the Backup Copy of SafeDisk Container Keys (*.sde) file type from the Save as type list. In the Type password box, specify the password which was used when creating the container keys backup copy. Then click Next. If the container keys backup copy is stored on an external device: ViPNet SafeDisk 3.3. User's Guide | 101 Choose External device and click Next. The Choose external device page will be displayed. Figure 63: Choosing an external device Connect your external device to the computer or reader. In the Choose device list, choose the device you are going to use (if it has not been chosen automatically). Note: The container keys backup copy (see Creating a Backup Copy of Container Keys on page 69) should be stored on the external device in advance. In the Type PIN box, type the PIN for your device. To save the PIN, select the corresponding check box. ViPNet SafeDisk 3.3. User's Guide | 102 Click Next. The Choose backup copy of container keys page will be displayed. Figure 64: Choosing a backup copy 3 In the list of backup copies, choose the one you are going to use to import a container. Type the password to get access to the container keys backup copy and click Next. If a backup copy of container keys and container file are located in different folders, on the Container File page, click the Browse button container file. and specify the location of the Figure 65: Specifying a path to the container file ViPNet SafeDisk 3.3. User's Guide | 103 4 On the Type of access to container (see figure on page 84) page, specify how you will access the container being imported. You can choose one of the following values: Password, Key file or External device. If you choose Key file or External device, configure available additional options (see Creating a Container on page 60). 5 If you do not want the container to be connected right after importing it, on the Container Importing Completed (see figure on page 100) page, clear the Connect container check box. Click Finish. As a result of your actions: o if you were restoring access to the container and the container file is undamaged, access to your container would be restored. o if you were using a backup copy of container keys to import a container file, the container file will be imported and you will be able to work with its contents. Note: When you import your container from container export file a new container, which is a replica of the container being imported, is created. When you import a container file using backup copy of this container’ keys you will be granted access to the container itself (no replica is created). ViPNet SafeDisk 3.3. User's Guide | 104 7 Restoring Access to Protected Information Why Do You Need It? 106 Restoring Protected Information. Best Practices 107 Restoring Access to All Containers by Restoring Configuration 109 ViPNet SafeDisk 3.3. User's Guide | 105 Why Do You Need It? The information is invaluable. If the information is lost or has been made available to unauthorized or malicious personnel, you will have to face serious consequences from minor issues to great financial losses. That is why since computers came into our business life, every company strives to make its best to secure its sensitive and confidential information. One of the common techniques allowing you to secure your information and to quickly restore it in case of force majeure is to regularly make backup copies of it. If something happens to your current revision of information, you will be able to restore the previous revision from its backup copy. Even if you lose some minor changes, the bulk of your information will be successfully restored and you will be able to quickly return to the business process you have accustomed to. ViPNet SafeDisk allows you to leverage the protection of your sensitive information by creating backup copies of all your containers as well as a single container or container keys. ViPNet SafeDisk 3.3. User's Guide | 106 Restoring Protected Information. Best Practices For better security, ViPNet SafeDisk gives you several ways to restore confidential information. This will help you to continue working with confidential information quickly in case of failures. The table below lists some common problems you may encounter in your everyday tasks when protecting your sensitive information and gives corresponding instructions how to overcome these problems. Table 4. Recommendations on restoring protected information Problem Solution Access to all containers is denied In this case, the best way to restore access is by Restoring Configuration. A configuration backup copy should be made in advance and container files should not be damaged. More information (see Restoring Access to All Containers by Restoring Configuration on page 109). Access to one or several containers is denied In this case, restore access to these containers by means of the corresponding backup copy of container keys. This operation will succeed, if the container file itself is not damaged. More information (see Importing a Container Using a Backup Copy of Container Keys on page 101). You want to change protection type for your container You can change the protection type to container in the Container Properties window (see Viewing and Changing Container Properties on page 83), on the Protection type tab. You can also import the container using a backup copy of container keys and change the protection type during import (see Importing a Container Using a Backup Copy of Container Keys on page 101). Container file has been damaged In this case, restore your data by importing the container export file made beforehand. Disk failure. Only backup copy of container keys survived There is no way to restore all your confidential data if the corresponding container file is damaged and there is no container export file. In this case, try to recover your container file from the failed hard disk. If you succeed, you will be able to import this container using backup copy of this container’s keys. Anyway, the best way to overcome this problem is to regularly make backup copies of container file (see Exporting a Container ViPNet SafeDisk 3.3. User's Guide | 107 Problem Solution on page 95). Disk failure. Only container file survived There is no way to restore all your confidential data, if a container file survived, but a backup copy of this container’s keys not. In this case, try to recover the corresponding backup copy of container keys (if it was ever made). If you succeed, you will be able to import this container using the backup copy of this container’s keys. Anyway, the best way to overcome this problem is to regularly make backup copies of container file (see Exporting a Container on page 95). Warning: To facilitate protected information backup and restore, we strongly recommend you to regularly perform the following tasks: create a container export file; create a backup copy of container keys; create a configuration backup copy. If you follow these recommendations you will be able to successfully restore all your protected information in case of failures or force majeure and minimize time spent to recover information created since the most recent backup copy had been made. ViPNet SafeDisk 3.3. User's Guide | 108 Restoring Access to All Containers by Restoring Configuration If access to all containers is denied, the best way to restore protected information is restore configuration. To restore a particular ViPNet SafeDisk configuration, a backup copy should be created in advance. You can create as many backup copies as you need. Backup copies of your ViPNet SafeDisk configuration are also created automatically when you close the program or restore configuration. Creating a Configuration Backup Copy A configuration backup copy is used to restore current program configuration. Warning: If multiple users work with the same ViPNet SafeDisk program copy, each user should create their own configuration backup copies. Each user will have access only to his personal configuration backup copies. To create a configuration backup copy: 1 Disconnect all connected containers (see Disconnecting a Container on page 81). 2 On the SafeDisk menu, select Restore Configuration. The Restore ViPNet SafeDisk Configuration wizard will be started. 3 On the Restore ViPNet SafeDisk Configuration page, select Create a backup copy of the current configuration. Click Next. ViPNet SafeDisk 3.3. User's Guide | 109 Figure 66: Restore ViPNet SafeDisk Configuration Wizard 4 On the Configuration backup creation page, in the Type a comment for your backup box, type a comment that describes the configuration. Writing a comment is not obligatory, but, if the backup is ever required, it will help you to find the backup from the backup list. The maximum number of characters you can enter for aNew comment is 200. Click Next. The configuration backup copy will be created. Figure 67: Creating a backup copy of current configuration 5 To close the wizard, click Finish. To initiate another backup operation, click Home. ViPNet SafeDisk 3.3. User's Guide | 110 Editing the Configuration Backup Copies List You can edit your list of configuration backup copies: remove configuration copies or edit comments. To edit your configuration backup copies list: 1 Disconnect all containers (see Disconnecting a Container on page 81). 2 On the SafeDisk menu, select Restore Configuration. The Restore ViPNet SafeDisk Configuration wizard will be started. 3 On the Restore ViPNet SafeDisk Configuration page, select Edit backups list and click Next. 4 On the Edit information about available backup copies page, in the Configuration backups list, select the backup copy you need to edit. If you want to edit a comment to it, click Edit comment. If you need to delete it, click Delete and confirm deleting. Configuration backup copies are automatically sorted by date and time of creation. To change the sort order, click either the Creation date and time or Comment column headings. Figure 68: Editing the list of backup copies 5 To complete editing, click Next. 6 To close the wizard, click Finish. To initiate another backup operation, click Home. ViPNet SafeDisk 3.3. User's Guide | 111 Restoring a Configuration To restore ViPNet SafeDisk configuration from a previously created backup copy: 1 Disconnect all containers (see Disconnecting a Container on page 81). 2 On the SafeDisk menu, select Restore Configuration. The Restore ViPNet SafeDisk Configuration wizard will be started. 3 On the Restore ViPNet SafeDisk Configuration page, select Restore ViPNet SafeDisk configuration, and then click Next. If the option is unavailable, it means that no configuration backup copy has been made. In this case, restore access to the container by importing using the corresponding backup copy of container keys (see Importing a Container Using a Backup Copy of Container Keys on page 101) or from the relevant container export file. 4 On the Choose configuration backup page, a list of all backups, whether created automatically or manually will be displayed. Figure 69: Choosing a backup copy Configuration backup copies are automatically sorted by date and time of creation. To change the sort order, click either the Creation date and time or Comment column headings. Choose the ViPNet SafeDisk configuration backup copy you want to recover from and click Next. 5 If your ViPNet SafeDisk user password had been changed since you created the configuration backup copy you try to restore, on the Password page, you will be asked to provide your user password, which was valid at the time when you created this backup. ViPNet SafeDisk 3.3. User's Guide | 112 Figure 70: Typing a password which was valid when this backup copy was created 6 The process of restoration of the chosen ViPNet SafeDisk configuration will be started. 7 To close the wizard, click Finish. To initiate another backup operation, click Home. Warning: If restoring configuration did not help you to solve the problem and access to containers is still denied, the container files are probably damaged. In this case, import each container from the container export file. The container export files should be created beforehand (see Exporting a Container on page 95). Cancelling the Last Configuration Restore If restoring configuration did not solve your problem, you can try to revert to the previous configuration. To do this, you should cancel your last configuration restore. To cancel the last configuration restore: 1 Disconnect all containers (see Disconnecting a Container on page 81). 2 Do one of the following: o On the SafeDisk menu, select Restore Configuration. o On the last page of the Restore ViPNet SafeDisk Configuration wizard, click Home. ViPNet SafeDisk 3.3. User's Guide | 113 3 In the Restore ViPNet SafeDisk Configuration wizard, select Undo last configuration restoration. Then lick Next. Figure 71: Undo last configuration restoration 4 To close the wizard, click Finish. To initiate another backup operation, click Home. ViPNet SafeDisk 3.3. User's Guide | 114 8 Using ViPNet SafeDisk in a Team Controlling Access to Protected Information. Registering a New User 116 Sharing Your Containers 118 Protecting Information Stored on a Server 125 Transferring Confidential Information with a Courier or via Network 127 ViPNet SafeDisk 3.3. User's Guide | 115 Controlling Access to Protected Information. Registering a New User ViPNet SafeDisk is a multi-user program allowing each user to work independently on his own protected data. You should register a new ViPNet SafeDisk user in the following situations: The same laptop is shared by employees on business trips. Using ViPNet SafeDisk each user can store her own confidential information. Any other user will have no idea what stored on other user’s containers and even that such information really exists. There are several user accounts on your computer. Each account belongs to different persons. Some of these persons want to use ViPNet SafeDisk to protect their confidential information You are going on vacation and want your colleague to continue working with your documents. This colleague does not have ViPNet SafeDisk installed on her computer. If you do not want her to access all your containers, you can create local user account in your operating system, create another user in ViPNet SafeDisk and give her a backup copy of keys belonging to the container, with which she will be allowed to work. You want to create a dummy user. You will later use this user account to create fake containers and populate them with fake data. You will log on to ViPNet SafeDisk using this account if you see malicious users approach. Container(s) created by one user will not be accessible by other users. To register a new user: 1 Start the program (see Starting ViPNet SafeDisk on page 28). Note: If ViPNet SafeDisk is running already, exit the program to close the current user's session (see Finishing the Work with ViPNet SafeDisk on page 29). 2 In the Enter Password window, click the create password of a new user link. ViPNet SafeDisk 3.3. User's Guide | 116 Figure 72: The Enter password window The ViPNet SafeDisk User Password window (see figure on page 35) will be shown. 3 In the Password of SafeDisk User window, choose User defined or Random. See Setting a User Password (on page 37) for more information on how to setup a new password for a new user. ViPNet SafeDisk 3.3. User's Guide | 117 Sharing Your Containers ViPNet SafeDisk allows you to share your containers between several users, thus leveraging team work with confidential information stored in these containers. You can share your containers in the following two ways: 1 Provide access to your container for one or more users on the same or different computers (see Providing Access to Your Container for One or More Users on the Same or Different Computer on page 120). Using this way you give an exclusive access to your container to one or more users by giving them a backup copy of container keys (if you and users you are giving your container to are registered on the same computer) or by giving them a backup copy of container keys and a container file itself (if these users are working on different computers). However, using this way, the concurrent access to protected information stored in your container (s) for all users will be impossible. In addition, even if you place your container file on a network drive and share it, two or more users will not be able to use this shared container simultaneously. 2 Share your container on a network (see Sharing Your Containers on a Network on page 120). Using this way you share on a network not a container file itself, but the Windows disk representing this container when it is connected in your ViPNet SafeDisk session. This gives you an unprecedented control over who will have access to your sensitive information and when. The first way is ideal in the situation, when you are on vacation and another user registered on your computer is asked to finish your tasks. In this case you should give this user a backup copy of your container key. This user should launch ViPNet SafeDisk using his or her password, import the appropriate container using the corresponding backup copy of container keys and complete all assigned tasks. If this user has no access to your computer you should give him or her a backup copy of container keys and a container file itself. The second way is perfect if you want team collaboration on some of protected documents. Suppose you created a project vision. Now you and your team should brainstorm your project vision and improve it. To do this, you connect the container with this project vision and share a Windows disk representing this container between a required number of users. In case you share your containers in the second way, you should be informed about the possibilities and limitations concerning sharing your containers (see Container Access Security on page 119). ViPNet SafeDisk 3.3. User's Guide | 118 Note: These limitations are applied only to the second way of sharing containers. Container Access Security You can organize container access security: depending on the file system in which the container has been formatted; depending on the current operating system. The dependence of access control to containers is illustrated by the table below. Table 5. Container Access Security Your operating system Container file system NTFS Microsoft Windows XP SP3 (32 bits)/Server 2003 (32/64 bits) FAT / FAT32 If you have selected the Exclusive access check box when connecting the container, the permissions assigned to the container disk will block access to this container for everybody except for you (the user who has connected this container). The access will be blocked regardless of the permissions assigned to the container disk in the operating system. In addition, you will not be able to configure network access to this disk. On the one hand, it will highly increase the protection when several users work on the same computer. However, on the other hand, the possibility for several users to work with the same container simultaneously will be limited. If you have not selected the Exclusive access check box when connecting the container, the access will be granted according to permissions described below for the operating systems Vista SP2 (32/64 bits)/Server 2008 (32/64 bits)/Windows 7 (32/64 bits). Vista SP2 (32/64 bits)/Server 2008 (32/64 bits)/Windows 7 (32/64 bits) When you connect a container, the permission will be configured so that only you (the user who has connected the container in the ViPNet SafeDisk program) could have full access to the container disk. Full access of all users to containers. When you share the container in the network, by means of the operating system you can block or allow other user to access the container disk. ViPNet SafeDisk 3.3. User's Guide | 119 Providing Access to Your Container for One or More Users on the Same or Different Computer To provide access to a container for other users: 1 If a backup copy of container keys has not been created in advance, create it now (see Creating a Backup Copy of Container Keys on page 69). 2 Give the backup copy of container keys file (*.sde) along with the password you used to create this backup copy to the user you want to provide access for. 3 If you are going to provide access for a user, who is not registered on your computer, you should give this user a container file (*.sdc) as well. Warning: If you let some other users use your container keys backup copy to get access to the container on your computer, they will not be able to access your container after updating (see Updating Container Keys on page 86). To continue working with your container, import it using the container keys backup copy. If you are a receiving party: 1 Start ViPNet SafeDisk and type the password. 2 On the Container menu, click Import. The Import Container wizard will be displayed. 3 Import a container using a backup copy of container keys. When importing is complete, both users will have access to the container. By sharing the backup copy of container keys, you can provide several users with access to the same container. However, only one user at a time will be able to work with the container. Sharing Your Containers on a Network To allow different users to work simultaneously or by turn with the same protected information you should share the Windows disk representing a ViPNet SafeDisk container. This allows you to share sensitive information stored in ViPNet SafeDisk container with users who have no ViPNet SafeDisk installed. This also allows you and your colleagues to work simultaneously with the protected information stored on your shared container. Warning: Think carefully before giving permission for shared use. Others do not need to install ViPNet SafeDisk to work with protected information stored in the shared container. ViPNet SafeDisk 3.3. User's Guide | 120 Note: When you connect a container in Windows Vista or later only you (the user who has connected the container) are allowed to work with files stored in this container. Some programs require administrator rights. Thus, if your user account does not have administrator rights, you will not be able to start such programs. In this case, we recommend you to launch executable files as an administrator or to grant administrator rights for the user who connects the container. To allow different users to work simultaneously with the same protected information: 1 In the main ViPNet SafeDisk window, select the container you want to share. 2 Connect the chosen container, if disconnected (see Connecting an Existing Container on page 75). 3 Open your computer folder (from the desktop or the Start menu), right-click the disk which corresponds to the connected container and select Share. The Local Disk Properties dialog box will be displayed. Figure 73: Sharing a container 4 In Windows Vista/Server 2008/Windows 7: o On the Sharing tab, click Advanced Sharing. ViPNet SafeDisk 3.3. User's Guide | 121 o In the Advanced Sharing window, select the Share this folder check box. Set the maximum number of simultaneous users of this container. You can also change share permissions (the Permissions button) and offline settings (the Caching button), if necessary. For more information about this, see Windows Help and How-to. Figure 74: Advanced sharing In Windows XP/Server 2003: ViPNet SafeDisk 3.3. User's Guide | 122 o On the Sharing tab, click Share this folder. Configure how your shared disk will be displayed in Windows explorer and how many users will be allowed to use this share simultaneously. You can also change share permissions (the Permissions button) and offline settings (the Caching button), if necessary. For more information about this, see Windows Help and How-to. Figure 75: Advanced sharing Tip: If you do not see the Share this folder option, make sure that the Use simple file sharing (recommended) check box is disabled. 5 Click Apply, then OK. Now your container functions as a shared folder. When it is connected, other users can work with your protected information as they open the network folder you have created. Container will be constantly accessible if the computer where the network you have created is located is reachable. When you and other users work by turn on the same computer, use the Switch user option. This option allows to switch user account without exiting the operating system and breaking access to the network folder. ViPNet SafeDisk 3.3. User's Guide | 123 To deny access to a shared container, just disconnect it (see Stopping Containers Sharing on page 124). You can also disconnect the container in ViPNet SafeDisk (see Disconnecting a Container on page 81). To share the container again, connect it and specify the same shared disk for this container as previously. Warning: After the system restart, you will need to configure the container sharing again. Stopping Containers Sharing To stop sharing a container: 1 In the Advanced Sharing window (see figure on page 122), clear the Share this folder check box. 2 Click Apply, then OK. Warning: Upon restarting you computer, you will need to configure container sharing anew. ViPNet SafeDisk 3.3. User's Guide | 124 Protecting Information Stored on a Server You can install ViPNet SafeDisk on your network server (s). This allows you to: enable protection for your corporate information stored on your server; enable concurrent access to the protected corporate information stored on the server; not to install ViPNet SafeDisk on every user’s working place thus drastically reducing the cost of ownership. To protect your corporate information, on network server (s): 1 Install ViPNet SafeDisk. 2 Consider Checklist: Protecting Your Information (on page 59). 3 Create one or several containers. 4 Connect these containers and save data you want to be available to other users to the connected container (s). 5 Using standard Windows tools, share the disk corresponding to the connected container (which contains protected information) (see Sharing Your Containers on a Network on page 120). Your staff will be able to work as usual. 6 To deny access to all users, disconnect the container (see Stopping Containers Sharing on page 124). ViPNet SafeDisk operation on network server (s) does not differ from ViPNet SafeDisk operation on users’ workstations. Using ViPNet SafeDisk installed on you network server (s) you always can: Create a backup copy (see Creating a Backup Copy of Container Keys on page 69) of your protected corporate information. Securely transfer your information between computers. It is especially important to protect your corporate information when sending a container over an unprotected network or with a courier using a removable media or a laptop. Since information is encrypted, it will be ViPNet SafeDisk 3.3. User's Guide | 125 impossible to gain access to it, if the laptop or the removable media are compromised and/or stolen. Immediately deny shared access to corporate information by using the Danger mode (see Immediate Denial of Access to Protected Information. Danger Mode on page 131). Immediately destroy corporate information in cases of extreme danger using the Extreme Danger mode (see Destroying Confidential Information. Extreme Danger Mode on page 134). ViPNet SafeDisk 3.3. User's Guide | 126 Transferring Confidential Information with a Courier or via Network When working with corporate information, it may be necessary to transfer confidential data from one office to another. If your laptop or removable media are lost or stolen, you need to avoid a leak. Similarly, a hacker can intercept your corporate sensitive information when it is being transferred over unprotected network protocols, for example, over FTP. ViPNet SafeDisk allows you to protect your corporate information during transferring and prevent data from being lost and /or compromised. To transfer confidential information with a courier or via network: 1 2 Prepare your confidential information for transferring. To do this, either: o make a container export file (see Exporting a Container on page 95); o make a backup copy of container keys (see Creating a Backup Copy of Container Keys on page 69) and copy it along with the container file to the same folder. Send prepared data via courier or via network. For more information, see Exporting and Importing Protected Information (on page 92). ViPNet SafeDisk 3.3. User's Guide | 127 9 Working in Potentially Insecure Conditions Checklist: Preparing to Work in Insecure Environment 129 Working under Malicious Users' Control 130 Immediate Denial of Access to Protected Information. Danger Mode 131 Destroying Confidential Information. Extreme Danger Mode 134 Key Combinations for the Danger and Extreme Danger Modes 137 ViPNet SafeDisk 3.3. User's Guide | 128 Checklist: Preparing to Work in Insecure Environment To protect your confidential data from falling into wrong hands, you should successfully complete all the tasks in the following check list. Task Reference Register a dummy user Preparing for Work under Malicious Users' Control (on page 130) Remember a password of your dummy user Log on to SafeDisk as a dummy user, create fake containers and populate these containers with fake data Working while under Malicious Users' Control (on page 130) Enable Danger mode Immediate Denial of Access to Protected Information. Danger Mode (on page 131) Enable Extreme Danger mode Destroying Confidential Information. Extreme Danger Mode (on page 134) Remember key combinations allowing you to quickly disconnect and/or destroy all containers Key Combinations for the Danger and Extreme Danger Modes (on page 137) Tip: We recommend you to print this checklist and select the check boxes as you advance through the steps outlined in this checklist. ViPNet SafeDisk 3.3. User's Guide | 129 Working under Malicious Users' Control ViPNet SafeDisk allows you to protect your confidential information even when you are under malicious users’ control. Preparing for Work under Malicious Users' Control 1 Register a new user (see Controlling Access to Protected Information. Registering a New User on page 116). This can be used as a dummy under malicious users’ control. 2 As a dummy user, create a container (see Creating a Container on page 60). 3 Connect this new container (see Connecting a Container on page 72). 4 Save information which realistically imitates the original into this container. 5 Remember the password of the dummy user. Working while under Malicious Users' Control When you are forced to work under malicious users’ control: 1 Start ViPNet SafeDisk (see Starting ViPNet SafeDisk on page 28). 2 Type the password of the dummy user. 3 Connect the container (see Connecting an Existing Container on page 75) with dummy information. Malicious users will not be able to find out whether the information stored in the connected container is real or fake (until they actually delve into the contents of this information). ViPNet SafeDisk 3.3. User's Guide | 130 Immediate Denial of Access to Protected Information. Danger Mode If there is a potential danger from outsiders and/or malicious users approaching your computer: 1 In advance, in the main window, either: o on the toolbar, click Danger , or o on the Security menu, select Activate Danger Mode, or o on the SafeDisk menu, select Options, in the navigation pane select Danger mode, in the view pane, select the Danger mode check box and click Apply. Figure 76: Configuring the Danger mode options The Danger mode will be enabled. Tip: If you do not want to be warned about enabling the Danger mode, either, in the Danger Mode pane, clear the Warn about activating Danger mode check box and click Apply, or, in the Activating Danger Mode window, select the Do not show this window again check box. ViPNet SafeDisk 3.3. User's Guide | 131 2 When outsiders approach your computer, do one of the following: o on the toolbar, click Disconnect All , o on the Security menu, select Immediately disconnect containers, or o press the hot key combination, Ctrl+Alt+D (by default). Tip: To change the hot key combination, in the Danger Mode pane (see figure on page 131), in the Immediately disconnect all containers by the following shortcut key box, set the combination of your choice by pressing the corresponding keys. Click Apply. All containers will be disconnected and access to confidential information stored in them will be denied. Windows disks corresponding to the connected containers will not be displayed in your computer folder. The ViPNet SafeDisk icon will disappear from the notification area. There would be no evidence left that you have worked with confidential information. If, within the specified time period (by default 60 seconds), ViPNet SafeDisk has failed to disconnect all the containers, then: all connected containers will be forced to disconnect, all applications started by you will be closed, you will be logged off from the system. To change this interval: 1 On the SafeDisk menu, select Options. 2 In the navigation pane, select Danger Mode. 3 In the Danger Mode pane, in the Whether SafeDisk cannot disconnect one of its containers, restart Windows in box, type or select the necessary time interval (in seconds). 4 Click Apply. ViPNet SafeDisk 3.3. User's Guide | 132 To disable the Danger mode, do one of the following: on the toolbar, click Danger on the Security menu, deselect Activate Danger Mode, in the Options window, in the Danger Mode pane (see figure on page 131), clear the Danger mode check box and click Apply. , ViPNet SafeDisk 3.3. User's Guide | 133 Destroying Confidential Information. Extreme Danger Mode The Extreme Danger mode allows you to destroy all confidential information stored in your containers quickly. This may be useful if suspect outsiders or malicious users are approaching and you see no other means of help. Warning: With the Extreme Danger mode you can destroy all your containers beyond recovery. Use it wisely. When you destroy all containers while in the Extreme Danger mode, all container keys for all users will be deleted and all the data stored in these containers will be lost. To destroy your confidential information quickly: 1 In advance, in the main window, either: o on the toolbar, click Extreme Danger ; o on the Security menu, select Activate Extreme Danger Mode; ViPNet SafeDisk 3.3. User's Guide | 134 o on the SafeDisk menu, select Options, in the navigation pane, select Extreme Danger Mode, then, in the view pane, select the Extreme Danger mode check box and click Apply. Figure 77: Configuring settings for Extreme Danger mode Tip: If you do not want to be warned about enabling the Extreme Danger mode, in the Options dialog box, in the Extreme Danger Mode pane, clear the Warn about activating Extreme Danger mode check box and click Apply or, in the Activating Extreme Danger Mode window, select the Do not show this window again check box. 2 To destroy your protected information immediately, on the toolbar, click Destruct All Containers times. three times or press the Ctrl+Shift+Alt+D hot key combination three Tip: To change the hot key combination, in the Options dialog box, in the Extreme Danger Mode pane (see figure on page 135), in the Destruct all containers by pressing the following shortcut key three times in a row box, set the combination of your choice by pressing the corresponding keys. Click Apply. ViPNet SafeDisk 3.3. User's Guide | 135 All the containers, containers’ keys and configuration backup copies for the current user will be destroyed. The main window will disappear from your screen and the icon will disappear from the notification area. If ViPNet SafeDisk has failed to disconnect all the containers, then: all connected containers will be forced to disconnect, all applications started by you will be closed, you will be logged off from the system. At the next program startup, the list of containers will be empty. To increase the security of your work, you can hide the Extreme Danger mode button from the ViPNet SafeDisk toolbar. To do this: 1 In the Options dialog box, in the Extreme Danger Mode pane (see figure on page 135), clear the Show Extreme Danger mode buttons on the toolbar check box. 2 Click Apply. You can make the Destruct All Containers button semi-transparent above all windows. This will simplify your access to the destruction option when necessary: 1 In the Options dialog box, in the Extreme Danger mode pane (see figure on page 135), select the Show containers destruction button always on top check box. 2 Click Apply. To disable the Extreme Danger mode, do one of the following: on the toolbar, click Extreme Danger on the Security menu, select Activate Extreme Danger Mode, in the Options dialog box, in the Extreme Danger Mode pane (see figure on page 135), clear the Extreme Danger mode check box and click Apply. , ViPNet SafeDisk 3.3. User's Guide | 136 Key Combinations for the Danger and Extreme Danger Modes Ctrl+Alt+D — you should press this key combination to disconnect all your containers at once (the Danger mode should be enabled). Ctrl+Shift+Alt+D — you should press this key combination three times in a row to destroy all your containers (the Extreme danger mode should have been enabled beforehand). ViPNet SafeDisk 3.3. User's Guide | 137 10 Removing Traces of Secure Data on Your Computer Why Do You Need It? 139 Cleaning Secure Data. Common Workflow 141 Checklist: Cleaning Secure Data 142 Removing Traces of Windows Activities 143 Removing Traces of Internet Explorer Activities 148 Full Cleanup 151 Full Cleanup Using the Command Line 154 ViPNet SafeDisk 3.3. User's Guide | 138 Why Do You Need It? The Windows operation system provides restoring deleted files even if you have deleted data by mistake, if you have emptied the recycle bin, deleted files by pressing Shift+Delete, formatted your hard disk, and even if your hard disk failed and you are unable to read any information on it. When you delete files by standard tools, the operation system just marks them to be deleted, changing their names, and later new files are re-written on their place. Formatting of a hard disk leaves its backup copy. If a hard disk fails, there are physical methods of information recovery. Thus, you can’t securely remove confidential information without the help of additional facilities. To provide secure cleaning of unprotected data, the Clean.exe utility is included in ViPNet SafeDisk distribution kit. Note: The data protected by ViPNet SafeDisk is always cleaned securely. You need to securely clean data in the following situations: You used a key file as a protection type for your container. Now you deleted the container. Your key file contains confidential information, thus the very existence of this file should be concealed. You worked with a document containing confidential information in MS Word. Even if you store this file in one of the ViPNet SafeDisk containers, your Windows operating system will store information what file, when and from where has been opened. To leverage security, you should wipe out these tracks. You have committed an on-line transaction involving your personal and financial data. Traces of this transaction have been stored in you cookies and temporary internet files. To protect yourself, you should purge this data beyond recovery. You have bought a new computer and decided to sell your old one. You have formatted your old hard disk using standard Windows tools in attempt to remove all traces of confidential information you have been working on. However, still there are techniques allowing malicious users to retrieve data from your formatted hard drive. To be sure that ViPNet SafeDisk 3.3. User's Guide | 139 no one will ever get access to your confidential information, use ViPNet SafeDisk free space cleaning feature. ViPNet SafeDisk 3.3. User's Guide | 140 Cleaning Secure Data. Common Workflow If you worked with documents, copied a text, moved files from one folder to another, deleted or removed them by standard tools, you need to clean all the remaining information securely from all possible locations. In ViPNet SafeDisk, you can securely remove traces of your activities by cleaning. To start, define the components to be cleaned. You can clean the traces of Windows and Internet Explorer activities. You can clean the traces of the following Windows activities: recent documents, temporary files, recycle bin, free space on the disks where files have been created before being put into the container. For more information about the above mentioned operations, see Removing Traces of Windows Activities (on page 143). You can clean the traces of the following Internet Explorer activities: web history, temporary internet files cookies. For more information about the above mentioned operations, see Removing Traces of Internet Explorer Activities (on page 148). ViPNet SafeDisk also allows you to remove all traces of confidential information at once with the Full Cleanup option (see Full Cleanup on page 151). If you are a power user or a programmer, and want to use a command line to clean the traces of confidential information, use the Clean.exe utility. ViPNet SafeDisk 3.3. User's Guide | 141 Checklist: Cleaning Secure Data To successfully protect your sensitive information and to be sure that you have removed all traces of your confidential activities, you should successfully complete all the tasks in the following checklist. Task Reference Regularly clean recent documents Removing Traces of Recently Opened Documents (on page 143) Regularly clean temporary files Deleting Temporary Files (on page 143) Regularly clean the recycle bin Cleaning the Recycle Bin (on page 144) Regularly clean traces of moved or deleted unprotected files Deleting Unprotected Files Securely (on page 144) Regularly clean free space on your hard disks Securely Cleaning Free Disk Space (on page 145) Regularly clean your browsing history Deleting Your Browsing History (on page 148) Regularly clean temporary internet files Deleting Temporary Internet Files (on page 148) Regularly clean cookies Deleting Cookies (on page 149) Tip: We recommend you to print this checklist and select the check boxes as you advance through the steps outlined in this checklist. ViPNet SafeDisk 3.3. User's Guide | 142 Removing Traces of Windows Activities Removing Traces of Recently Opened Documents Windows allows you to see your recently opened documents quickly using links to them from the Recent directory, which usually can be reached from the Start menu. Malicious users can find out about the existence of confidential information by those links. Clean the Recent directory to provide secure storage of confidential information. ViPNet SafeDisk securely deletes links to your recent documents from the following locations: C:\Users\your_user_name\AppData\Roaming\Microsoft\Windows\Recent (Windows Vista or higher). C:\Users\your_user_name\AppData\Roaming\Microsoft\Office\Recent (Windows Vista or higher). C:\Documents and Settings\your_user_name\Recent (Windows XP). To clear recent documents: 1 In ViPNet SafeDisk main window, on the Cleanup menu, click Windows, then click Recent Documents. 2 As a result of your actions all links to your recently opened documents will be deleted. Tip: You can make the Recent folder be cleaned securely and automatically each session (see Configuring ViPNet SafeDisk on page 90). Deleting Temporary Files Many Windows applications create temporary files when working with files. These temporary files may contain a full backup copy of all data stored in original files as well as additional and service information. As a rule, these temporary files are deleted by applications themselves when they finish working with the original files. However, sometimes these temporary files are ViPNet SafeDisk 3.3. User's Guide | 143 left by applications and are not deleted. Such “forgotten” temporary files with your confidential information may impose a serious threat to security of your sensitive data. That is why it is extremely necessary to securely delete all temporary files left by applications when working with confidential information. ViPNet SafeDisk securely deletes temporary files from the following locations: C:\WINDOWS\Temp C:\Documents and Settings\user_name\Local Settings\Temp C:\Users\your_user_name\AppData\Local\Temp (or from another folder used for storing temporary files in your system). (Windows XP). (Windows Vista or higher). To clean temporary files: 1 In ViPNet SafeDisk main window, on the Cleanup menu, click Windows, then click Temporary Files. 2 As a result of your actions all temporary files which were left by applications will be deleted beyond recovery. Cleaning the Recycle Bin Files deleted by standard tools are moved to the recycle bin and can be easily restored by the Restore option. To prevent the deleted files to be restored from the recycle bin, clean the recycle bin securely. To clean the recycle bin: 1 In ViPNet SafeDisk main window, on the Cleanup menu, click Windows, then click Recycle Bin. 2 As a result of your actions all contents will be securely deleted from the recycle bin. Deleting Unprotected Files Securely Before you installed ViPNet SafeDisk, your confidential files and documents had been unprotected. This usual way, as you already know, did not provide appropriate security for your confidential data. Even if you have deleted the file from your hard disk and emptied the recycle bin, it could be easily restored using various software or hardware techniques. When you installed ViPNet SafeDisk and copied or moved all your confidential files into protected containers, these files (and information stored within) can still be easily restored from ViPNet SafeDisk 3.3. User's Guide | 144 your hard drive in case of need. To eliminate this security threat, you should securely delete these files from your hard disk, after you copy or move them to protected containers. To delete unprotected files securely, either: Delete the files themselves (see Deleting Files Securely on page 145). If you have already deleted the files using standard Windows tools, use free disk space cleaning feature of ViPNet SafeDisk (see Securely Cleaning Free Disk Space on page 145). Deleting Files Securely To delete files: 1 Select the files in the unprotected folder. 2 Right-click them and, on the context menu, select Secure delete. (For Windows 7 and Windows versions prior to Vista you can also click Secure delete in the File menu of the Explorer window.) 3 Confirm deleting the files. Securely Cleaning Free Disk Space To use free disk space cleaning feature: 1 In ViPNet SafeDisk main window, on the Cleanup menu, select Windows, and then click Free Space on Disks. The Cleanup wizard will be started. 2 On the Free disk space page, leave the check boxes near the disks you need to clean selected and click Next. ViPNet SafeDisk 3.3. User's Guide | 145 Figure 78: Selecting disks to clean free space on 3 Wait till the end of the cleaning process. 4 On the Cleanup Completed page, click Finish. Choosing Default Disks to Clean Free Space On To pre-set the default disks to clean free space on: 1 In ViPNet SafeDisk main window, on the SafeDisk menu, click Options. 2 In the Options dialog box, in the navigation pane, click Clean Free Space on Disks. ViPNet SafeDisk 3.3. User's Guide | 146 Figure 79: Configuring options of free disk space cleanup 3 In the Clean free space on the following disks list, select the check boxes for the disks you need to clean free space on by default. 4 Click Apply, then OK. ViPNet SafeDisk 3.3. User's Guide | 147 Removing Traces of Internet Explorer Activities Warning: Secure deleting of web history, Internet cache and cookies works only in Internet Explorer browser. Other browsers will be supported only in the next ViPNet SafeDisk versions. Deleting Your Browsing History As you browse the web, Internet Explorer stores information about the websites you visit (by default, addresses are stored there up to 3 weeks). Usually, it is helpful to have this information stored on your computer because it can improve your web browsing speed. But if you do not want this personal information to be left behind, clean it: You internet browser history is located in the following folders: C:\Documents and Settings\your_user_name\Local Settings\History (Windows XP); C:\Users\your_user_name\AppData\Local\Microsoft\Windows\History (Windows Vista or higher). To clean your Internet browsing history: 1 In the ViPNet SafeDisk main window, on the Cleanup menu, click Internet Explorer, then click History. 2 As a result all information about web sites you have recently visited will be securely deleted. Deleting Temporary Internet Files Internet Explorer stores in cache all the data received from the Internet when working with different web pages. These data can be really useful if you are using slow modem or DSL connections for it greatly increases your browsing speed. However, if you do not want this personal information to be left behind, clean it: ViPNet SafeDisk 3.3. User's Guide | 148 Internet Explorer stores its temporary files in the following folder: C:\Documents and Settings\your_user_name\Local Settings\Temporary Internet Files (Windows XP). C:\Users\your_user_name\AppData\Local\Microsoft\Windows\Temporary Internet Files (Windows Vista or higher). To clean your temporary internet files: 1 In the ViPNet SafeDisk main window, on the Cleanup menu, click Internet Explorer, then click Temporary Internet Files. 2 As a result all your temporary internet files will be deleted beyond recovery. Deleting Cookies Cookies are small text files a web browser stores on a computer. These files may store the contents of your shopping baskets from Internet shops, logins and passwords used on websites and other confidential information that can be concealed if you delete cookies from Internet Explorer. Warning: To successfully clean cookies all your Internet Explorer sessions should be closed. Internet Explorer cookies are stored in the following folders: Windows XP: o C:\Documents and Settings\your_user_name\Cookies. o C:\Documents and Settings\your_user_name\Local Settings\Temporary Internet Files. Windows Vista or later: o C:\Users\your_user_name\AppData\Roaming\Microsoft\Windows\Cookies. o C:\Users\your_user_name\AppData\Local\Microsoft\Windows\Temporary Internet Files. To clean your Internet Explorer cookies: 1 In the ViPNet SafeDisk main window, on the Cleanup menu, click Internet Explorer, then click Cookies. ViPNet SafeDisk 3.3. User's Guide | 149 2 As a result of your actions all your cookies will be deleted beyond recovery. Your confidential information will not be left behind. ViPNet SafeDisk 3.3. User's Guide | 150 Full Cleanup You may need to clean all or several types of traces of confidential information at once. To do this: 1 In ViPNet SafeDisk main window, on the Cleanup menu, click Full Cleanup. The Cleanup wizard will be displayed. 2 In the Cleanup wizard, on the Full cleanup page, in the Clean list, select the check boxes of the components you need to clean. Upon finishing, click Next. Figure 80: Starting full cleanup 3 On the Free disk space page, select the Clean free disk space check box, if you also want to clean free space on your hard disks from the traces of deleted or moved confidential files and documents. In the Select drives to be cleaned list, select the check boxes of the disks you need to clean free space on. Click Next. ViPNet SafeDisk 3.3. User's Guide | 151 Figure 81: Cleaning free disk space options 4 On the Cleanup Completed page, you can see what types of confidential information traces have been cleaned at your last launch of full cleanup. Figure 82: Completing the cleaning process Click Finish, to exit the wizard. Configuring Full Cleanup Full cleanup options allow you to select the components that will be cleaned by default when you run full cleanup and to configure automatic cleanup. ViPNet SafeDisk 3.3. User's Guide | 152 To specify the information for deletion during the cleanup, do the following: 1 On the SafeDisk menu, select Options. The Options dialog box will be displayed. 2 In the navigation pane, click Full Clean. Figure 83: Configuring full cleanup options 3 In the Full Clean pane, in the Will be cleaned during full cleanup list, select the check boxes for the components you want to be cleaned by default. 4 Click Apply, then OK. To configure full cleanup to run automatically: 1 In the Options dialog box, in the Full Clean pane, in the Automatically run full cleanup list, select the required option: After start of SafeDisk, While shutting down SafeDisk (on exiting ViPNet SafeDisk), While shutting down Windows (on exiting Windows), Every day, Every 3 days, Every week, Every month or Do not clean. 2 Click Apply, then OK. ViPNet SafeDisk 3.3. User's Guide | 153 Full Cleanup Using the Command Line ViPNet SafeDisk allows you to use command line arguments to start various cleaning processes. This can be useful in the following situations: You want to securely clean files of the specific type. For example, you want to get rid of any traces of your *.doc files for this was the very files which contain confidential information. You want to securely clean a specific folder on your hard disk. You have written an automation script (*.bat file) and want to use cleaning features of ViPNet SafeDisk in your script. Perhaps, you want to run ViPNet SafeDisk cleaning operations according to a schedule without any subsequent user interaction or to perform secure cleaning every time before you shut down your computer. You have written a plug-in for MS Word allowing you to securely work with some data. Business requirements of your plug-in require you to securely delete all traces that you have been working with confidential documents in MS Word. You want to execute ViPNet SafeDisk cleaning commands without starting ViPNet SafeDisk graphical user interface. Perhaps, you do not want to draw attention of your users from more important activities. To run secure cleaning commands from the command-line: 1 Run the command line. 2 Enter the path to the clean.exe utility. By default, the path is: C:\Program Files\InfoTeCS\ViPNet SafeDisk\. 3 In the command prompt, type Clean.exe, space, forward slash (/) and give necessary arguments. For the arguments and their impact on the Clean.exe operations, see the table below. ViPNet SafeDisk 3.3. User's Guide | 154 Table 6. Secure cleaning commands Command in the main menu (graphical user interface) Command in the command line (with arguments) Result Free Space Clean.exe /f <disk name's letter> Free space on the defined disk is cleaned. To clean free space on a disk, you need to have the privilege to write to the root folder of this disk. Temporary Files Clean.exe /t Temporary files are deleted securely. Recent Files Clean.exe /d Files from the Recent folder (recently used documents) are deleted securely. Recycle Bin Clean.exe /r The recycle bin is cleaned securely. Clean.exe <mask> The files with the defined mask are deleted from the defined (by default, from the current) folder. Defining a mask, please note: Traces of Windows activities ? — stands for 1 character. * — stands for several characters. For example, if you enter the *.doc mask, all files with .doc extension will be deleted. Clean.exe <folder name> The folder content is deleted. History Clean.exe /h IE browsing history is cleaned securely. Temporary Internet Files Clean.exe /i IE cache is cleaned securely. Cookies Clean.exe /c IE Cookies is deleted securely Traces of Internet Explorer activities Tip: You can launch the clean.exe utility with some parameters. For example, Clean.exe /c /h /i /t /r /d /fc c:\folder1\*.* c:\folder2. ViPNet SafeDisk 3.3. User's Guide | 155 11 Troubleshooting Viewing the Events Log 157 Other Common Issues 158 ViPNet SafeDisk 3.3. User's Guide | 156 Viewing the Events Log To view the ViPNet SafeDisk events log: 1 Open the program installation folder. By default, the path is: o C:\Users\User\AppData\Roaming\InfoTeCS\SafeDisk in the operating systems Windows Vista (and later) and Windows Server 2008; o C:\Documents and Settings\User\Application Data\InfoTeCS\SafeDisk\ in the operating systems Windows XP and Windows Server 2003. 2 Open the text document SDEvents.log. You can see information on the following events: o logon to the system by User, o logoff from the system by User, o Danger mode, o Extreme Danger mode, o all actions with every container (container name is also specified) (creating new container, mounting container, dismounting container, removing container, importing container, exporting container, changing properties of the container). For all these events the following data is recorded: date and time of the event, event result: failed or success. ViPNet SafeDisk 3.3. User's Guide | 157 Other Common Issues Container Not Available If, when connecting a new container, a message will be displayed, saying it is unavailable: 1 Open My Computer. 2 Press F5 to refresh it. Afterwards, new drives will be visible. To start working with a new container, format it. Formatting Disks Impossible If ViPNet SafeDisk is installed on your computer with Windows OS and you do not possess administrator rights, formatting container disks is impossible. To enable this function, either obtain administrator rights on your computer, at least temporarily, or ask your ViPNet administrator to create a container for you and import it to your computer. Container File Not Found If you start ViPNet SafeDisk and a previously created container is not found, in the main program window, the container will have the icon. If you cannot connect your container in ViPNet SafeDisk: Check if the container name has been changed. Check if the path to the container has been changed. If the container is located on a remote network disk, check connection. If the container is stored on an external device, check that the device is connected. If you try to connect the container which is not found, the Container not found window will be shown. To get access to the information stored in the container which is not found, specify the new location of the container file. ViPNet SafeDisk 3.3. User's Guide | 158 Figure 84: Container file is not found Connection to a Container Lost If the connection to a container connected as a network drive or on a removable media was lost: 1 Disconnect the container (see Disconnecting a Container on page 81). 2 Restore the connection (or wait till it is restored). 3 Connect the container again (see Connecting an Existing Container on page 75). Cannot Connect to a Container If you cannot connect to a container, either: Check if other users are connected to your container (this can happen if you have placed your container file on the shared remote drive) Remember, only one person at a time can work with a container file See Container File Not Found (on page 158). Compress or Encrypt Attribute Is Set for the Container File In the current ViPNet SafeDisk version, you cannot use a file with the compress or encrypt attribute as a container. If you try to connect such a container, an error message will be displayed informing you that the container cannot be connected. Figure 85: Compressed or encrypted attribute is enabled ViPNet SafeDisk 3.3. User's Guide | 159 The compress or encrypt attribute can be set automatically for the container file when it is created. This happens in case the compress attribute is set for the disk, on which the container file is created, as well as for all the folders and files on the disk. To disable the compress and encrypt attributes: 1 Right-click the container and, on the context menu, select Properties. 2 In the container properties window, on the General tab, click Advanced. 3 In the Advanced Attributes window, under Compress and Encrypt attributes, clear the corresponding check boxes. Unable to Create a Container with the External Device Protection Type If, when you create a container with the External device protection type, you are informed that it is impossible to create a container, do the following: 1 Make sure the connected external device is supported by the ViPNet SafeDisk software. For the list of supported external devices, see Supported External Storage Devices (on page 164). 2 Make sure the required drivers or other software are installed on the computer. For the devices' software requirements, see Supported External Storage Devices (on page 164). 3 Make sure the external device has been initialized correctly. For example, during the initialization you were informed it would be necessary to change the PIN at the next device connection, but you had not changed the PIN. In this case, you will not be able to use this device for storing container protection keys. 4 Delete all the information from the protected memory of the external device. To do this, initialize the device. For the detailed instruction on how to initialize your external device, see the documentation shipped together with the device. 5 Try to use another device with a greater volume of the protected memory. ViPNet SafeDisk 3.3. User's Guide | 160 A Version History This Appendix describes general changes that were made to previous versions of ViPNet SafeDisk. Version 3.2.2 This section contains a brief description of changes made to ViPNet SafeDisk 3.2.2 and its new features. French localization A French localization has been released. The user interface, documentation and Help have been localized. Improved documentation and Help Documentation and Help files have been revised, their quality has been improved. The emphasis has been made on best practices and user scenarios. Version 3.2.1 This section contains a brief description of changes made to ViPNet SafeDisk 3.2.1 and its new features. Specifying an alphanumeric PIN ViPNet SafeDisk 3.3. User's Guide | 161 Now, using external devices, you can specify not only the numeric PIN, but also an alphanumeric PIN. Version 3.2.0 This section contains a brief description of changes made to ViPNet SafeDisk 3.2.0 and its new features. 64-bit operating systems support Now ViPNet SafeDisk is compatible with 64-bit operating systems: Windows XP Pro (64 bit), Windows Vista (64 bit), Windows Server 2008 (64 bit), Windows 7 (32/64 bit). Version 3.1.1 In version 3.1.1, the program functionality has improved, and some critical bugs of version 3.1.0 have been fixed. Version 3.1.0 This section contains a brief description of changes made to ViPNet SafeDisk 3.1.0 and its new features. Ability to work either with a free edition, or with a registered version of the software Now you can use either a free edition or a fully-functional version of the software. A free edition requires no registration, but has some functional restrictions. A fully-functional version requires registration. A demo version is no longer supported. A free edition of version 3.1.0 has the following restrictions: o maximum number of users — 1; o maximum number of containers — 1; o maximum container size — 100 MB. A free edition does not have any time limitations. A registered version is not restricted to any of the mentioned points. Securely cleaning your unwanted data using options of the main menu Previously, you could securely clean unwanted data only by means of the command line. Now these options are available in the program main window, on the Cleanup menu. To configure secure cleanup, you can use a special wizard. ViPNet SafeDisk 3.3. User's Guide | 162 Figure 86: Options to securely clean your information You can configure running the secure cleanup automatically for certain events and at scheduled intervals. Using ACOS2-8k smart cards as external devices ACOS2-8k smart cards have been added to the list of supported devices that you can use to protect your containers. ACOS2-8k smart cards operate via standard PC/SC interface. Viewing the container formatting process Now you can receive information on container formatting status, in case this process takes a long time. Figure 87: Container formatting process ViPNet SafeDisk 3.3. User's Guide | 163 B Supported External Storage Devices The ViPNet software supports different external storage devices to read and securely store your personal information (passwords, keys, and so on). Warning: You cannot store personal keys of several users on the same device, except for signature keys. Before you store keys on a device, make sure that the device is formatted. In the table below, you can find the list of devices supported by the ViPNet software. The table below contains the following information: The Device Type column contains the list of devices supported by the ViPNet software that are used to read the keys. The Key type column contains the types of keys that can be read by the devices listed. The Requirements column contains an outline of requirements that should be met to use each key. The last column contains information about support for the PKCS#11 standard. Note: PKCS#11 (also known as Cryptoki) is one of the PKCS standards (Public Key Cryptography Standards — cryptographic standards of public keys) developed by the ViPNet SafeDisk 3.3. User's Guide | 164 RSA Laboratories company. The standard defines the API interface independent of the platform and intended for the work with cryptographic devices of identification and data storage. Table 7. External Devices Supported Device Type Key Type Requirements PKCS#11 support eToken Aladdin eToken PRO (personal electronic keys, eToken PRO (Java), eToken PRO, smart cards eToken PRO (Java), eToken PRO by Aladdin Company) PKI Client software of the 5.1 version or later should be installed on the computer. Yes Supported OS: Windows XP SP3 (32 bit), Server 2003 SP2 (32 bit), Vista SP2 (32/64 bit), Server 2008 (32/64 bit), Windows 7 (32/64 bit), Server 2008 R2. Note: You can use eToken PRO SmartCard with any standard PC/SCcompatible USB card reader. A reader device must be connected to the computer. 1-Wire Drivers software, version 3.6.2, ensuring data exchange with the iButton should be installed on the computer. Supported OS: Windows XP SP3 (32 bit), Server 2003 (32 bit), Vista SP2 (32 bit), Server 2008 (32 bit), Windows 7 (32 bit) Smartcards with memory of the I2C (ASE M4) type, synchro cards with a 2/3 bus and protected memory meeting the requirements of the ISO7816-3 (ASE MP42) standard. ASEDrive III PRO-S reader by Athena company is used to process data on a smart card. Drivers of the 2.6 version should be installed on the computer. Supported OS: Windows XP SP3 (32 bit), Server 2003 (32 bit), Vista SP2 (32/64 bit). Siemens smart cards (CardOS/M4.01a, CardOS V4.3B, CardOS V4.2B, CardOS V4.2B DI, For the proper work, Siemens CardOS API V5.0 and later should be installed on the computer. Supported OS: Windows XP SP3 (32 bit), Server 2003 EE SP2 (32 bit), Vista iButton Smartcard Athena Siemens CardOS iButton (Dallas) (iButton electronic keys of the DS1993, DS1994, DS1995, and DS1996 types) No No Yes ViPNet SafeDisk 3.3. User's Guide | 165 Device Type Key Type CardOS V4.2C, CardOS V4.4) Requirements PKCS#11 support SP2 (32/64 bit), Server 2008 SP2 (32/64 bit), Windows 7 (32/64 bit). ViPNet SafeDisk 3.3. User's Guide | 166 C Regional Settings For the English localization to be displayed correctly in the ViPNet software interfaces under the Microsoft Windows XP/Server 2003/Vista/Server 2008/Windows 7 OS of a localization other than English, you should install Latin characters support for those programs that do not support Unicode. We recommend you to configure these parameters before you install the ViPNet software. Warning: You will need to do the same settings if an English MUI (Multilanguage User Interface) is installed. This means that the OS core is not in English, and the English language has been installed for the interface and help files later. In such a case, regional settings are not English and require to be changed. For the Windows XP and Server 2003 OS to support Latin characters: 1 Choose Control Panel. 2 Select Regional and Language Options. 3 In the Regional and Language Options window, click the Advanced tab. 4 In the list, choose English (United States). 5 Select the Apply all settings to the current user account and to the default user profile check box. ViPNet SafeDisk 3.3. User's Guide | 167 Figure 88: Choosing a language for the programs that do not support Unicode in the Windows XP system 6 Click OK. Probably, you will need to reboot. For the Windows Vista, Server 2008, and Windows 7 OS to support Latin characters: 1 Choose Control Panel > Clock, Language, and Region > Region and Language. 2 In the Region and Language window, click the Administrative tab. ViPNet SafeDisk 3.3. User's Guide | 168 Figure 89: Additional language parameters 3 On the Administrative tab, click Change system locale. 4 In the list, choose English (United States) and click OK. Figure 90: Choosing system locale 5 On the Administrative tab, click Copy settings. 6 Select the Welcome screen and system accounts check box and click OK. ViPNet SafeDisk 3.3. User's Guide | 169 Figure 91: Copying your settings To avoid problems with encoding in some systems, we recommend you to do the following: 1 In the Region and Language window, on the Formats tab, in the Format list, select English (United States). ViPNet SafeDisk 3.3. User's Guide | 170 Figure 92: Region and language settings 2 In the Region and Language window, on the Location tab, in the Current location list, select your country. ViPNet SafeDisk 3.3. User's Guide | 171 Figure 93: Specifying your current location ViPNet SafeDisk 3.3. User's Guide | 172 D Glossary B Backup copy of container keys A special file holding a copy of all your keys used to protect your container. If your key file becomes corrupted or you cannot access a container while the container file itself is undamaged, you can use the backup copy of this container’s key to regain access to this container. You can also create a backup copy of container keys when giving somebody access to your container file. This file has the *.sde extension. See also: Container file (on page 174). C Container See Container file (on page 174). Container export file You create this file when exporting a container. This file includes both a container file and a corresponding backup copy of this container’s keys. ViPNet SafeDisk 3.3. User's Guide | 173 You create this file when you want to create a full backup of all your data stored in your container and when you want to give another person the possibility to work with your confidential information. This file has the *.sdx extension. See: Backup copy of container keys (on page 173), Container file (on page 174). Container file A special file where all your protected data is stored. This file is mounted as another Windows logical disk in your system. You can work with this disk as you work with other logical disks, drag and drop files, copy, paste, remove and so on. This file has an *.sdc extension and is hidden by default. To show this file in Windows Explorer, enable Show hidden files and folders. This option can be found in the Folder Options dialog box on the View tab. D Danger Mode A special feature of ViPNet SafeDisk, which allows you to disconnect all containers at once when you see malicious or unauthorized users approach. See also: Extreme danger mode (on page 174). Digital roulette An integrated ViPNet software component which allows you to launch a random number generator based on your chance movements. Dummy user A special fake user account you should create to simulate working activities if working under malicious user control. We strongly recommend you to create this account beforehand. E Extreme danger mode A special feature of ViPNet SafeDisk allowing you to destroy all containers when you see malicious users approach and no one can put you out of the trouble and help you. See also: Danger mode (on page 174). ViPNet SafeDisk 3.3. User's Guide | 174 T Type of access to a container This feature allows you to choose the way how your ViPNet SafeDisk container will be protected. You can choose one the following values: Password (your container will be protected by the password you use to log on to ViPNet SafeDisk); Key file (your container will be protected by the special key file); Token (your container will be protected by a token you insert in a slot). ViPNet SafeDisk 3.3. User's Guide | 175 E Index B Backup copy of container keys • 69, 174 Beginning Registration • 44, 53 Buying the Program (Getting a Serial Number) • 43, 46, 56 C Changing Container File Location • 83 Checklist Cleaning Secure Data • 59 Preparing to Work in Insecure Environment • 59 Protecting Your Information • 125 Cleaning the Recycle Bin • 142 Compress or Encrypt Attribute Is Set for the Container File • 67 Configuring ViPNet SafeDisk • 29, 30, 143 Connecting a Container • 26, 79, 130 Connecting a Container Using a Key File • 75 Connecting a Container with an External Device • 76 Connecting an Existing Container • 72, 121, 130, 159 Container Access Security • 79, 118 Container export file • 97 Container file • 66, 173, 174 Container File Not Found • 159 Controlling Access to Protected Information. Registering a New User • 28, 101, 130 Converting a Container • 25 Creating a Backup Copy of Container Keys • 59, 64, 66, 74, 102, 120, 125, 127 Creating a Configuration Backup Copy • 40 Creating a Container • 59, 104, 130 Creating a User Defined Password • 35, 37 D Danger Mode • 174 Deleting a Container • 60 Deleting Cookies • 142 Deleting Files Securely • 145 Deleting Temporary Files • 142 Deleting Temporary Internet Files • 142 Deleting Unprotected Files Securely • 142 Deleting Your Browsing History • 142 Destroying Confidential Information. Extreme Danger Mode • 32, 126, 129 Digital roulette • 38 Disconnecting a Container • 68, 83, 89, 95, 109, 111, 112, 113, 124, 159 E Exporting a Container • 59, 68, 107, 108, 113, 127 Exporting and Importing Protected Information • 127 Extreme danger mode • 174 F Finishing the Work with ViPNet SafeDisk • 32, 79, 116 Full Cleanup • 141 ViPNet SafeDisk 3.3. User's Guide | 176 G Generating a Random Password • 35, 37 I If the Configuration of Your Computer Has Been Changed • 42 Immediate Denial of Access to Protected Information. Danger Mode • 82, 126, 129 Importing a Container Using a Backup Copy of Container Keys • 74, 107, 112 K Key Combinations for the Danger and Extreme Danger Modes • 129 L Launching ViPNet SafeDisk for the First Time • 28 Limitations of a Free Edition • 23 P Preparing for Work under Malicious Users' Control • 129 Protecting Information with ViPNet SafeDisk • 36 Providing Access to Your Container for One or More Users on the Same or Different Computer • 87, 118 R Receiving Your Registration Code from the Administrator • 45, 56 Regional Settings • 23 Registering ViPNet SafeDisk • 16, 23, 43, 49, 51, 52, 60 Removing Traces of Internet Explorer Activities • 141 Removing Traces of Recently Opened Documents • 142 Removing Traces of Secure Data on Your Computer • 32 Removing Traces of Windows Activities • 141 Requesting a Registration Code • 43, 44, 55 Requesting Your Registration Code by Email • 45 Requesting Your Registration Code by Phone • 45 Requesting Your Registration Code on the Internet (Online) • 45, 48, 51 Restoring Access to All Containers by Restoring Configuration • 59, 107 Restoring Access to Protected Information • 80, 101 S Saving Registration Data • 42, 48, 51, 54 Securely Cleaning Free Disk Space • 142, 145 Setting a User Password • 40, 117 Sharing Your Containers on a Network • 118, 125 Starting ViPNet SafeDisk • 26, 35, 79, 116, 130 Stopping Containers Sharing • 124, 125 Supported External Storage Devices • 15, 64, 160 System Administrator Actions for Registration Using a File • 42, 51 U Updating Container Keys • 84, 120 V Viewing and Changing Container Properties • 24, 107 W Working while under Malicious Users' Control • 129 ViPNet SafeDisk 3.3. User's Guide | 177