User`s Guide

Transcription

User`s Guide
ViPNet SafeDisk 3.3
User's Guide
© 1991–2012 Infotecs ®. All rights reserved.
Version: 00012-06 34 01 ENU
This document is included in the software distribution kit and is subject to the same terms and conditions as the software itself.
No part of this publication may be reproduced, published, stored in an electronic database, or transmitted, in any form or by any
means — electronic, mechanical, recording, or otherwise — for any purpose, without the prior written consent of Infotecs JSC.
ViPNet is a registered trademark of Infotecs JSC, Moscow, Russia.
All brands and product names that are trademarks or registered trademarks are the property of their owners.
Infotecs GmbH
Oberwallstr. 24
10117 Berlin
Deutschland
Tel: +49 (0) 30 206 43 66 0
Fax: +49 (0) 30 206 43 66 66
Email: [email protected]
Web: http://www.infotecs.biz
Contents
Introduction ....................................................................................................................................... 8
About This Document .................................................................................................... 9
Audience................................................................................................................. 9
Document Conventions .......................................................................................... 9
About ViPNet SafeDisk.................................................................................................. 11
What's New in Version 3.3.0 .......................................................................................... 12
System Requirements ..................................................................................................... 15
Limitations of a Free Edition .......................................................................................... 16
Distribution Kit ............................................................................................................... 17
Feedback ......................................................................................................................... 18
Chapter 1. General Information ...................................................................................................... 19
ViPNet SafeDisk Main Features..................................................................................... 20
Principles of ViPNet Information Protection. ViPNet SafeDisk at a Glance ................. 21
Chapter 2. Installing, Starting, Upgrading and Uninstalling ViPNet SafeDisk .......................... 22
Installing ViPNet SafeDisk ............................................................................................ 23
Upgrading ViPNet SafeDisk .......................................................................................... 24
Converting a Container .......................................................................................... 26
Starting ViPNet SafeDisk ............................................................................................... 28
Finishing the Work with ViPNet SafeDisk .................................................................... 29
Uninstalling ViPNet SafeDisk ........................................................................................ 32
Chapter 3. Getting Started with ViPNet SafeDisk ......................................................................... 34
Launching ViPNet SafeDisk for the First Time ............................................................. 35
Setting a User Password ................................................................................................. 37
Creating a User Defined Password ......................................................................... 37
Generating a Random Password............................................................................. 37
Changing How Random Passwords Are Generated ............................................... 39
Changing a User Password ............................................................................................. 40
Chapter 4. Registering ViPNet SafeDisk ........................................................................................ 41
Before You Begin ........................................................................................................... 42
Why You Need to Register .................................................................................... 42
Beginning Registration ........................................................................................... 42
Buying the Program (Getting a Serial Number) ............................................................. 44
Requesting a Registration Code ..................................................................................... 45
Requesting Your Registration Code on the Internet (Online) ................................ 45
Requesting Your Registration Code by Email ....................................................... 48
Requesting Your Registration Code by Phone ....................................................... 49
Receiving Your Registration Code from the Administrator................................... 51
Registering ViPNet SafeDisk ......................................................................................... 53
Saving Registration Data ........................................................................................ 55
If the Configuration of Your Computer Has Been Changed .......................... 55
System Administrator Actions for Registration Using a File ......................................... 56
Chapter 5. Protecting Information with ViPNet SafeDisk ............................................................ 57
Checklist: Protecting Your Information ......................................................................... 59
Creating a Container ....................................................................................................... 60
Backup Copy of Container Keys .................................................................................... 68
Starting a Wizard for Creating a Backup Copy of Container Keys........................ 68
Creating a Backup Copy of Container Keys .......................................................... 69
Connecting a Container .................................................................................................. 72
Connecting a Container Using a Key File .............................................................. 74
Connecting a Container with an External Device .................................................. 74
Connecting an Existing Container.......................................................................... 75
Formatting a Container ................................................................................................... 77
Common Workflow When Protecting Your Sensitive Information ............................... 79
ViPNet SafeDisk Container Icons .......................................................................... 79
Disconnecting a Container.............................................................................................. 81
Viewing and Changing Container Properties ................................................................. 83
Updating Container Keys ............................................................................................... 86
Changing Container File Location ................................................................................. 88
Deleting a Container ....................................................................................................... 89
Configuring ViPNet SafeDisk ........................................................................................ 90
Chapter 6. Exporting and Importing Protected Information ....................................................... 92
Why Do You Need It? .................................................................................................... 93
Exporting a Container..................................................................................................... 95
Importing a Container to a PC ........................................................................................ 98
Importing a Container from a Container Export File ............................................. 98
Importing a Container Using a Backup Copy of Container Keys .......................... 101
Chapter 7. Restoring Access to Protected Information ................................................................. 105
Why Do You Need It? .................................................................................................... 106
Restoring Protected Information. Best Practices ............................................................ 107
Restoring Access to All Containers by Restoring Configuration ................................... 109
Creating a Configuration Backup Copy ................................................................. 109
Editing the Configuration Backup Copies List ...................................................... 111
Restoring a Configuration ...................................................................................... 112
Cancelling the Last Configuration Restore ............................................................ 113
Chapter 8. Using ViPNet SafeDisk in a Team ................................................................................ 115
Controlling Access to Protected Information. Registering a New User ......................... 116
Sharing Your Containers ................................................................................................ 118
Container Access Security...................................................................................... 119
Providing Access to Your Container for One or More Users on the Same or
Different Computer ................................................................................................ 120
Sharing Your Containers on a Network ................................................................. 120
Stopping Containers Sharing .................................................................................. 124
Protecting Information Stored on a Server ..................................................................... 125
Transferring Confidential Information with a Courier or via Network .......................... 127
Chapter 9. Working in Potentially Insecure Conditions ............................................................... 128
Checklist: Preparing to Work in Insecure Environment ................................................. 129
Working under Malicious Users' Control ....................................................................... 130
Preparing for Work under Malicious Users' Control.............................................. 130
Working while under Malicious Users' Control ..................................................... 130
Immediate Denial of Access to Protected Information. Danger Mode........................... 131
Destroying Confidential Information. Extreme Danger Mode ....................................... 134
Key Combinations for the Danger and Extreme Danger Modes .................................... 137
Chapter 10. Removing Traces of Secure Data on Your Computer .............................................. 138
Why Do You Need It? .................................................................................................... 139
Cleaning Secure Data. Common Workflow ................................................................... 141
Checklist: Cleaning Secure Data .................................................................................... 142
Removing Traces of Windows Activities ....................................................................... 143
Removing Traces of Recently Opened Documents................................................ 143
Deleting Temporary Files....................................................................................... 143
Cleaning the Recycle Bin ....................................................................................... 144
Deleting Unprotected Files Securely ...................................................................... 144
Deleting Files Securely .................................................................................. 145
Securely Cleaning Free Disk Space ............................................................... 145
Choosing Default Disks to Clean Free Space On .......................................... 146
Removing Traces of Internet Explorer Activities ........................................................... 148
Deleting Your Browsing History ........................................................................... 148
Deleting Temporary Internet Files ......................................................................... 148
Deleting Cookies .................................................................................................... 149
Full Cleanup ................................................................................................................... 151
Configuring Full Cleanup....................................................................................... 152
Full Cleanup Using the Command Line ......................................................................... 154
Chapter 11. Troubleshooting ........................................................................................................... 156
Viewing the Events Log ................................................................................................. 157
Other Common Issues .................................................................................................... 158
Container Not Available......................................................................................... 158
Formatting Disks Impossible.................................................................................. 158
Container File Not Found ....................................................................................... 158
Connection to a Container Lost .............................................................................. 159
Cannot Connect to a Container .............................................................................. 159
Compress or Encrypt Attribute Is Set for the Container File ................................. 159
Unable to Create a Container with the External Device Protection Type .............. 160
Appendix A. Version History .......................................................................................................... 161
Version 3.2.2 .......................................................................................................... 161
Version 3.2.1 .......................................................................................................... 161
Version 3.2.0 .......................................................................................................... 162
Version 3.1.1 .......................................................................................................... 162
Version 3.1.0 .......................................................................................................... 162
Appendix B. Supported External Storage Devices........................................................................ 164
Appendix C. Regional Settings........................................................................................................ 167
Appendix D. Glossary ...................................................................................................................... 173
Appendix E. Index............................................................................................................................ 176
Introduction
About This Document
9
About ViPNet SafeDisk
11
What's New in Version 3.3.0
12
System Requirements
15
Limitations of a Free Edition
16
Distribution Kit
17
Feedback
18
ViPNet SafeDisk 3.3. User's Guide
|8
About This Document
Audience
This guide addresses the needs of anyone who wants to use the ViPNet SafeDisk software to
protect their information quickly, easily and effectively.
This guide starts with a general explanation of the ViPNet SafeDisk technology. Then it delves
into ViPNet SafeDisk installation and registration. Next chapters inform you about tasks you
can complete using ViPNet SafeDisk. The guide ends with a brief explanation of
troubleshooting scenarios, thus allowing you to avoid some common pitfalls.
In between, the material is organized in order of increasing detail and complexity. This means
you can read until you learn what you need at the moment, and then continue as the need arises.
Alternatively, you can approach this guide randomly, on a sort of need to know basis. The index
and table of contents will guide you to the specific information you need.
We assume that you have basic knowledge of how to work in Windows operating systems and
why your confidential information should be protected.
Document Conventions
This document concerns the following conventions:
Table 1. Document conventions
Icon
Description
Warning: Indicates an obligatory action or information which may be critical for
continuing user operations.
Note: Indicates a non-obligatory, but desirable action or information which may be
helpful for users.
Tip: Contains additional information.
ViPNet SafeDisk 3.3. User's Guide
|9
Table 2. Conventions for highlighted information
Icon
Description
Name
The name of an interface element. For instance, the name of a window, a
box, a button or a key.
Key+Key
Shortcut keys. To use the shortcut keys, press and hold the first key and
press other keys.
Menu > Submenu >
Command
A hierarchical sequence of elements. For instance, menu items or sections
in the navigation pane.
Code
A file name, path, text file (code) fragment or a command executed from
the command line.
ViPNet SafeDisk 3.3. User's Guide
| 10
About ViPNet SafeDisk
In our modern times of technological progress, information is valuable; its leak can have severe
consequences.
Unwanted or even malicious users may be interested in gaining access to data — such as
business correspondence, reports on company activity, innovations and so on; they aim to make
money, to injure your business reputation or to usurp authors’ rights.
Even if your documents are not secret, do you really want others with access to your computer
to read your correspondence, notes and diaries or view your photos? Your friends and relatives
may even accidentally remove or modify sensitive documents — with undesirable
consequences.
So, it is very important to protect your information from being read, modified, copied or
removed by other persons. You should pay special attention to information protection if you use
a laptop, as you might easily leave it unattended (or perhaps even have it stolen). You need to
protect your information while ensuring access for those who need it, for example, your
employees.
Of course, you should be able to protect yourself without too much time or effort. If you do not
know anything about cryptography, it should have no impact on your information protection
experience. Encryption/decryption operation should be transparent and do not require too much
action from your side. In addition, the software you intend to use should seamlessly integrate
into business processes, you have accustomed to.
The ViPNet SafeDisk software successfully solves all these problems. It protects your
confidential information while allowing access for those who need it.
ViPNet SafeDisk 3.3. User's Guide
| 11
What's New in Version 3.3.0
This section contains a brief description of changes made to ViPNet SafeDisk 3.3.0 and its new
features.

Forced container disconnection
You can force container disconnection in case files stored in the container are used by
other application.
Figure 1: Forced container disconnection

Changing Container Keys
To increase the security of information stored in containers, you can now update container
keys that are used to encrypt your container contents. After you update container keys, you
will not be able to get access to your container using old keys. We recommend you to
update container keys at least every 15 months.
Figure 2: Update container keys

Storing Container Keys Backup Copy on an External Device
To increase the security of information stored in containers, you can store your container
keys backup copy on an external device. For details, see the list of supported external
storage devices.
ViPNet SafeDisk 3.3. User's Guide
| 12

Container formatting
Previously, when you were formatting a container, you used a standard Windows interface.
Now, for your comfort, the container formatting wizard has been developed. The wizard
starts automatically when you connect a container that has not been formatted.
Figure 3: Formatting a container

Modified limitations of a free edition
Previously, in a free edition of the software, the maximum container size was 100 MB.
Now, using a free edition, you can create a container that is up to 1 GB in size.

Increased default container size
Previously, the default container size was 100 KB. Now, to provide the user with a more
positive experience and the ability to work with a greater amount of information, the
default container has been increased up to 100 MB.

Running several instances of ViPNet SafeDisk independently in different sessions of
the operating system
Now you can run several software instances independently in the different sessions of the
operating system. This allows you to organize several users to work with the software on
the same computer simultaneously and independently from one another, each in his or her
own private session of the operating system.

Exclusive access
Now, for the operating systems Microsoft Windows XP SP3 (32 bit)/Server 2003 (32/64
bit), you can restrict acces to a container by selecting the Exclusive access check box.
Previously, you could restrict access to a container only by means of the operating system.
ViPNet SafeDisk 3.3. User's Guide
| 13
Figure 4: Configuring exclusive access

No need to restart the computer after the software setup or upgrade
Previously, for the changes to take effect, you had to restart your computer after the
software setup or upgrade. Now you do not have to.

Improved Documentation and Help
Documentation and Help files have been revised. Description of new functionality has
been added, the chapters have been updated to reflect the changes in the program interface.
ViPNet SafeDisk 3.3. User's Guide
| 14
System Requirements
The minimum system requirements for your computer to run ViPNet SafeDisk are as follows:

Processor — Intel Core 2 Duo or any other x86-compatible processor of similar
characteristics with two or more cores.

RAM: 128 MB.

Free disk space: 20 MB.

A network adapter or modem.

Operating system — Microsoft Windows XP SP3 (32 bit), Server 2003 (32 bit), Vista SP2
(32/64 bit), Server 2008 (32/64 bit), Windows 7 (32/64 bit).

Internet Explorer version 6.0 or later.
ViPNet SafeDisk supports several types of external devices. For more information on external
devices, see Supported External Storage Devices (on page 164).
ViPNet SafeDisk 3.3. User's Guide
| 15
Limitations of a Free Edition
A free edition is a new ViPNet SafeDisk 3.1 feature. There is no trial period, but there are some
limitations in ViPNet SafeDisk functionality.
When you install ViPNet SafeDisk 3.3 for the first time and decide not to register it, you will
encounter the following limitations of the free edition:

Number of users — no more than one.

Number of containers — no more than one.

Container’s size — no more than 1 GB.
To remove these limitations, register the program (buy a pay version) (see Registering ViPNet
SafeDisk on page 41). You can find out whether your ViPNet SafeDisk is a free edition or a pay
version in the About ViPNet SafeDisk window.
You can install ViPNet SafeDisk version 3.3 (or later) above the registered 2.9 version or earlier
and also choose not to register it. In this case, you and all other users registered in version 2.9
will be able to work with the existing containers and configuration backup copies. However, to
create or import new containers or to add another user you will have to register your copy of the
program.
If you install ViPNet SafeDisk version 3.3 above the registered 3.0, 3.1, 3.2 version you will not
encounter any limitations.
If you upgrade any unregistered or trial version of SafeDisk with the version 3.3 you will not be
able to work with the current configuration (a list of users, containers and configuration backup
copies). This means that the software will work as if you have installed it for the first time and
chosen not to register it.
ViPNet SafeDisk 3.3. User's Guide
| 16
Distribution Kit
The ViPNet SafeDisk distribution kit contains:

a ViPNet SafeDisk installation file — Setup.exe;

“ViPNet SafeDisk 3.3. User's Guide.”
All the documents are shipped in electronic form in PDF format.
ViPNet SafeDisk 3.3. User's Guide
| 17
Feedback
Finding Additional Information
For more information about Infotecs products and technologies, see the following resources:

Information about current Infotecs products http://www.infotecs.biz/soft.htm.

Information about Infotecs solutions http://www.infotecs.biz/solution.htm.

Frequently asked questions http://www.infotecs.biz/faq.htm.
Contacting Infotecs
We value any feedback from you. If you have any questions concerning Infotecs products and
solutions, any suggestions, complains or other feedback, feel free to contact us by means of the
following:

Support request form https://secure.infotecs.biz/service.htm.

Support email [email protected].

+49 (0) 30 206 43 66 0 — telephone.

+49 (0) 30 206 43 66 66 — fax.
Errata
Infotecs makes every effort to ensure that there are no errors or misprints in the text of all
documents supplied with ViPNet software. However, no one is perfect, and mistakes do occur.
If you find an error in one of our documents, like a spelling mistake or some inaccuracy in
describing user scenarios or system functions, we would be very grateful for your feedback. By
sending in errata you may save other reader hours of frustration, and at the same time you will
be helping us provide documentation in even higher quality.
ViPNet SafeDisk 3.3. User's Guide
| 18
1
General Information
ViPNet SafeDisk Main Features
20
Principles of ViPNet Information Protection. ViPNet SafeDisk at a Glance
21
ViPNet SafeDisk 3.3. User's Guide
| 19
ViPNet SafeDisk Main Features
ViPNet SafeDisk is your right choice if:

You need to ensure that your relatives, friends or colleagues do not read, modify or remove
your important documents accidentally or on purpose.

You store your information on a laptop and want to prevent it from being read, copied or
used by someone else (if lost or stolen).

You have confidential information stored on several computers, for example, at home and
at work, and need to protect each one, allowing secure data transfer from one computer to
another.

You need to transfer confidential information on a removable media and want to prevent
the data from being stolen or lost.

You need to control access to confidential information on one or several computers, for
example, hide some documents from one user while providing access for another.

As a result of outsiders approaching your computer, you need to deny access immediately
and hide your confidential information — along with the fact that it actually exists.

As a result of malicious users approaching your computer, you need to resort to removing
your confidential information quickly and securely.
ViPNet SafeDisk 3.3. User's Guide
| 20
Principles of ViPNet Information
Protection. ViPNet SafeDisk at a Glance
You create a container as an encrypted file on a disk or removable media and specify access —
by password, key file or token.
When you connect a container, it appears as a usual Windows disk and you can save your
confidential information on it.
Information is automatically encrypted when you save it and is unencrypted when being
accessed. This can be done quickly, allowing you to work with documents as usual and reliably
protect your information.
Data is encrypted and decrypted sector by sector when the corresponding sectors are being
written and read. Thus, only the data used at the moment is being encrypted in the container.
This provides high speed of protected data processing and transparency for users of the
applications.
If a container is located on a network drive, transferred data is encrypted, as encryption and
decryption are done on a local computer.
When you disconnect the container, it disappears from the system and cannot be found. Other
users have no means of finding out whether such a container exists or gain access to it.
To continue working with information stored in the container, reconnect it. by typing your
password, specifying a key file or inserting a token.
ViPNet SafeDisk 3.3. User's Guide
| 21
2
Installing, Starting, Upgrading
and Uninstalling ViPNet
SafeDisk
Installing ViPNet SafeDisk
23
Upgrading ViPNet SafeDisk
24
Starting ViPNet SafeDisk
28
Finishing the Work with ViPNet SafeDisk
29
Uninstalling ViPNet SafeDisk
32
ViPNet SafeDisk 3.3. User's Guide
| 22
Installing ViPNet SafeDisk
Warning: If ViPNet SafeDisk is installed on a computer with the Windows OS
localization other than English, you should change Windows regional settings (see
Regional Settings on page 167) for Latin characters to be displayed correctly in the
ViPNet SafeDisk interface.
To install ViPNet SafeDisk you should have administrative privileges on your OS. To install the
software:
1
Click the
launched.
setup.exe, located in the installation package. The setup program will be
2
Follow the instructions.
3
You can register ViPNet SafeDisk after the installation.
Unregistered ViPNet SafeDisk software is free of charge and there is an unlimited work
period, but there are some functional limitations (see Limitations of a Free Edition on
page 16).
You need to register ViPNet SafeDisk if you want to enjoy a full-featured version.
See Registering ViPNet SafeDisk (on page 41) for more information on ViPNet SafeDisk
registration.
ViPNet SafeDisk 3.3. User's Guide
| 23
Upgrading ViPNet SafeDisk
Warning: We strongly recommend you to upgrade ViPNet SafeDisk following the
instructions in the order given below.
To upgrade ViPNet SafeDisk, you need an installation file of the latest software version. To
ensure the successful upgrading:
1
Depending on the version of the installed software, complete the following tasks:
o
If the current version of ViPNet SafeDisk is 2.9 or earlier and the protection type of
the container is External device, change the protection type (see Viewing and
Changing Container Properties on page 83) of the container. Containers created that
way cannot be converted into a new format supported in the version 3.3.
o
If the current version of ViPNet SafeDisk is either 3.0 or 3.1, create backup copies of
keys for the containers with the External device protection type. It is necessary if you
want to access your containers after they have been converted into a new format.
Warning: If the backup copies of keys are not created, information stored in these
containers will not be accessible. You will be able to access the information only if you
install the older ViPNet SafeDisk version anew.
o
If the version is 3.2 or later, no additional actions are required.
Tip: To find out the software version installed on your computer, on the Help menu,
select About SafeDisk.
2
3
Create a backup copy of your protected data. To do this, do one of the following:
o
Copy container files and backup copies of these containers' keys into a safe location.
o
Create export files of all your containers and copy them into a safe location.
Read carefully information about the peculiarities of upgrading your current ViPNet
SafeDisk version to version 3.3:
ViPNet SafeDisk 3.3. User's Guide
| 24
o
If the current version of ViPNet SafeDisk is 2.9 or earlier, upon upgrading you will
have a free edition of ViPNet SafeDisk 3.3 with a number of limitations installed. To
remove these limitations, you need to re-purchase and register the ViPNet SafeDisk
version being installed.
o
If the current version is a Demo one, upon upgrading you will have a free edition of
ViPNetSafeDisk 3.3 installed and no access to the earlier created containers, user
accounts and configuration backups.
o
If the current version is 3.2 or earlier, the notification on a changed container format
will be shown informing you about the necessity to convert containers created in the
earlier versions.
All the configuration backups created in the earlier versions of ViPNet SafeDisk 3.2 or
earlier will be deleted.
4
Unload all the ViPNet SafeDisk software components.
5
Double-click the setup.exe
launched.
file. The ViPNet SafeDisk setup program will be
If you upgrade the software version 3.2 or earlier and have containers created, the ViPNet
SafeDisk Update wizard will be launched.
Figure 5: Upgradiing ViPNet SafeDisk version 3.2 and earlier
In the wizard window, select the Yes, I accept the changes and understand the
consequences of this update check box. As a result, the containers created in the versions
3.2 and earlier will be converted into a new format and will be accessible in ViPNet
SafeDisk 3.3. To connect containers in the version 3.3, you should perform conversion
(see Converting a Container on page 26).
ViPNet SafeDisk 3.3. User's Guide
| 25
6
Wait till the upgrading process is finished.
If you have completed all the actions described above correctly, the upgrading process will be
completed successfully and you will be able to start working with the program.
Converting a Container
To ensure a higher protection level for your private data, in ViPNet SafeDisk version 3.3, the
container format has been changed. You should convert containers created in the earlier
versions into a new format.
To convert containers into the new format:
1
Start the program (see Starting ViPNet SafeDisk on page 28).
2
Connect container (see Connecting a Container on page 72) created in an earlier version.
For this container, in the Status column, the Old format message will be displayed.
Figure 6: Connecting a container created in an earlier version of the program
3
The Convert Container wizard will be launched.
ViPNet SafeDisk 3.3. User's Guide
| 26
Figure 7: Converting a container into the new format
If you have not exported the container of the old format before upgrading the program, on
the Convert Container page, select the Export container in the old format check box.
The Export container wizard will be launched. Follow the instructions.
Tip: You should export the container in order to work with this container in an earlier
version of ViPNet SafeDisk in case you need to roll back. That is why we strongly
recommend you to complete the export before converting.
4
Wait till the converting process is finished.
As a result the container will be converted into a new format and will be accessible in ViPNet
SafeDisk version 3.3.
ViPNet SafeDisk 3.3. User's Guide
| 27
Starting ViPNet SafeDisk
To start ViPNet SafeDisk:
1
Either:
o
Click the Start button, choose All Programs > ViPNet > ViPNet SafeDisk.
At the installation, the path to the program on the Start menu might have been
changed.
o
On the desktop, double-click the ViPNet SafeDisk shortcut
(this shortcut
displayed only if the corresponding option has been selected during the installation).
The window requesting your password will be shown. If you are launching ViPNet
SafeDisk for the first time, follow the instructions found in the Launching ViPNet
SafeDisk for the First Time (on page 35) section.
Figure 8: The Enter password window
2
In the Enter password box, type your password and click OK. The ViPNet SafeDisk
main window will be shown.
If you do not have a user password yet, click the create password of a new user link and
follow the instructions (see Controlling Access to Protected Information. Registering a
New User on page 116).
ViPNet SafeDisk 3.3. User's Guide
| 28
Finishing the Work with ViPNet
SafeDisk
You can finish working with ViPNet SafeDisk in one of the following ways:

By minimizing the program main window. The program will continue running, containers
will be accessible, but the main window will be minimized to the notification area. You
can maximize the program window when needed.

By exiting the program. All the connected containers will be disconnected, the program
will be closed.
To minimize the main program window, either:

in the upper right corner of the window, click the Close button

press Alt+F4.
, or
As a result, the Closing ViPNet SafeDisk Window window will be displayed prompting
you to choose whether to close the program or to minimize its main window. Choose Hide
SafeDisk window without exit and click OK.
Note: For the chosen action to be applied without the prompt each time you click the
Close button
, select the Do not show this window again check box. Also you can
set the action in the program options window (see Configuring ViPNet SafeDisk on
page 90).
Figure 9: Closing the ViPNet SafeDisk window
ViPNet SafeDisk 3.3. User's Guide
| 29
Tip. If you are going to leave your computer unattended we strongly recommend you to
use the Exit SafeDisk option.
In addition, you can configure ViPNet SafeDisk to disconnect all containers, if no one is
working with them. To do this, on the SafeDisk menu, click Options. Then, in the
navigation pane, click General and, in the General pane, select the Disconnect
containers after specified period of inactivity check box. For more information, see
Making ViPNet SafeDisk General Settings (see Configuring ViPNet SafeDisk on page
90).
To maximize a program window back, either:

in the notification area, click the icon

press Ctrl+Alt+M, or

on your desktop, double-click the ViPNet SafeDisk shortcut
, or
.
To exit ViPNet SafeDisk, either:

in the notification area, right-click the icon

in the main ViPNet SafeDisk main window, in the SafeDisk menu, click Exit.
and choose Exit.
When you finish working with ViPNet SafeDisk, the program disconnects all the connected
containers. If for some reason you cannot disconnect your container (for example, the files
stored in the container are being used by some other application), the corresponding warning
will be displayed.
Figure 10: A warning window informing that you cannot disconnect a container
If such a window is displayed:
1
Make sure that the files stores in your container are not used by some other application and
click Retry.
ViPNet SafeDisk 3.3. User's Guide
| 30
2
To force your container disconnection, in the message window, select the Force
disconnection check box and click Retry. You will be warned about possible data loss.
Figure 11: A warning about possible data loss
3
Make sure that all data in your container are saved and click Yes.
Note: If some information stored in your container has not been saved, you may lose it
as a result of forced disconnection.
ViPNet SafeDisk 3.3. User's Guide
| 31
Uninstalling ViPNet SafeDisk
Before starting uninstalling ViPNet SafeDisk:
1
2
Make backup copies of all your protected information. To do this, either:
o
copy a container file and a corresponding backup copy of this container’s keys to the
same secured location;
o
create container export files for all your containers and copy them to the secure
location.
If you do not want to leave any traces of confidential information on your computer:
o
Use ViPNet SafeDisk cleaning features (see Removing Traces of Secure Data on
Your Computer on page 138).
o
Enable the Extreme Danger mode (see Destroying Confidential Information. Extreme
Danger Mode on page 134) and destroy all your containers and container keys.
To uninstall ViPNet SafeDisk:
1
Exit the program (see Finishing the Work with ViPNet SafeDisk on page 29).
2
On the Start menu, click Settings, then Control Panel, then Programs and Features.
3
In the programs list, double-click ViPNet SafeDisk. The Add/Remove Wizard will
launch.
4
Select Remove All Components. Click Next.
5
Click Finish. The message warning about the remaining containers will be displayed:
Figure 12: Warning about files remaining in the program folder
6
If you need to keep working with the containers in future, click No. If you click Yes, all
information will be deleted.
ViPNet SafeDisk 3.3. User's Guide
| 32
7
To complete ViPNet SafeDisk uninstallation, restart your computer. To restart the
computer immediately after installation, click Yes.
Figure 13: The restart computer message
If you want to restart the computer later, click Restart Later.
ViPNet SafeDisk 3.3. User's Guide
| 33
3
Getting Started with ViPNet
SafeDisk
Launching ViPNet SafeDisk for the First Time
35
Setting a User Password
37
Changing a User Password
40
ViPNet SafeDisk 3.3. User's Guide
| 34
Launching ViPNet SafeDisk for the
First Time
Upon you have successfully installed SafeDisk onto your computer, you are ready to begin
protecting your confidential information. However, to actually start protecting your information,
more required steps should be taken.
These steps include:

launching ViPNet SafeDisk (it will be the first time you launch the program),

setting your user password.
To launch ViPNet SafeDisk for the first time:
1
Start the program (see Starting ViPNet SafeDisk on page 28). The Password of SafeDisk
user window will be shown.
Figure 14: Creating a password for a SafeDisk users
2
Set your user password as described in the Creating a User Defined Password (on page 37)
and Generating a Random Password (on page 37) topics.
3
Click OK. The main ViPNet SafeDisk window will be shown.
ViPNet SafeDisk 3.3. User's Guide
| 35
4
Proceed as described in the Protecting Information with ViPNet SafeDisk (on page 57)
chapter.
ViPNet SafeDisk 3.3. User's Guide
| 36
Setting a User Password
Your user password is required to log onto ViPNet SafeDisk. That is why we recommend you to
set a secure password.
To achieve this, you can use the Create a random password feature (see Generating a Random
Password on page 37) or specify a password yourself (see Creating a User Defined Password
on page 37).
Warning: If you lose your user password, it will be impossible to gain access to
information protected by ViPNet SafeDisk.
Creating a User Defined Password
1
In the Password of SafeDisk User window, in the Password Type list, select User
Defined.
2
In the Enter password box, type your password. In the Confirmation box, retype it.
3
Click OK.
Note: As you are creating a password, you can use any uppercase or lowercase letters,
numerals and other characters.
Tip: We strongly recommend you not to use your private information (name, last name,
date of birth, telephone number) as your password, and simple passwords as well (for
example, “qwerty”, “asdfgh” and so on).
Generating a Random Password
1
In the Password of SafeDisk User window, in the Password type list, choose Random.
ViPNet SafeDisk 3.3. User's Guide
| 37
Figure 15: Choosing the “random” password type
2
Digital Roulette (on page 174), a random number generator, will be launched. To create a
random key or password, random numbers are required. During your ViPNet SafeDisk
sessions, Digital roulette is automatically launched when the first random number is
required.
Figure 16: Digital Roulette
3
Follow the instructions in the Digital Roulette window. A random password will be
generated.
If you want to use another password, click Another.
Tip: A password phrase helps to remember the password. Passwords are generated
from several initial letters of each word in a password phrase. For example, if you type
three initial letters of each word in a password phrase “navigator educates cactus”, you
will get a password “naveducac”.
ViPNet SafeDisk 3.3. User's Guide
| 38
Changing How Random Passwords Are Generated
To change your random password settings:
1
In the Password of SafeDisk User window, click Options. The Random passwords
options window will be shown.
Figure 17: Random password options
2
o
In the Password phrase language list, choose English, German, French, Spanish or
Russian.
o
In the Words in password phrase and Letters used lists, select the necessary
numbers.
To save your changes, click OK.
ViPNet SafeDisk 3.3. User's Guide
| 39
Changing a User Password
To increase security, we recommend you to change your password from time to time.
Warning: If you have made configuration backup copie (see Creating a Configuration
Backup Copy on page 109) before changing your password and you are planning to use
them, remember your previous password.
To change user password:
1
On the Security menu, select Change Password.
2
If there are any connected containers, you will be requested to disconnect them.
3
The Password of SafeDisk User window will appear.
4
Create a new password (see Setting a User Password on page 37).
Next time you log onto ViPNet SafeDisk, use your new password.
ViPNet SafeDisk 3.3. User's Guide
| 40
4
Registering ViPNet SafeDisk
Before You Begin
42
Buying the Program (Getting a Serial Number)
44
Requesting a Registration Code
45
Registering ViPNet SafeDisk
53
System Administrator Actions for Registration Using a File
56
ViPNet SafeDisk 3.3. User's Guide
| 41
Before You Begin
Why You Need to Register
When you have installed ViPNet SafeDisk on your computer, ViPNet SafeDisk will run in the
demo mode. You can register ViPNet SafeDisk anytime. All restrictions will be removed, the
period of using your ViPNet SafeDisk will never expire.
That is why we recommend you the following workflow:

install ViPNet SafeDisk, configure your fully-functional demo ViPNet network and
evaluate it freely;

to use a fully-functional version, register your ViPNet SafeDisk.
Beginning Registration
You can register ViPNet SafeDisk on your own (usual registration). To do this, follow the
instructions below.
If you are a system administrator and would like to register several copies of the program, you
can perform registration using a file. This registration type allows you to gather registration
requests from all the users, send these requests as one e-mail message and receive all the
registration codes at once. For more information, see System Administrator Actions for
Registration Using a File (on page 56).
Note: If you install ViPNet SafeDisk on a computer, and the program was registered on
this computer before, you can use registration data previously saved in a *.brg file (see
Saving Registration Data on page 55).
If you have modified configuration of the computer on which ViPNet SafeDisk is
installed, see If the Configuration of Your Computer Has Been Changed (on page 55).
To register ViPNet SafeDisk:
1
In the ViPNet SafeDisk window, on the Help menu, click Registration. The Registration
of ViPNet SafeDisk wizard will be launched.
ViPNet SafeDisk 3.3. User's Guide
| 42
Figure 18: The Registration of ViPNet SafeDisk Wizard
2
If you have:
o
not yet purchased ViPNet SafeDisk, select Buy program (get serial number) (see
Buying the Program (Getting a Serial Number) on page 44).
Note: If you have bought ViPNet SafeDisk on a compact disk, you already have a serial
number (it is supplied with the compact disk) and you can go to the registration code
request (see below).
o
purchased ViPNet SafeDisk and have a serial number, select Request registration
code (see Requesting a Registration Code on page 45).
Note: If you request your registration code online, your ViPNet SafeDisk registration
will be done automatically (no user interference required).
o
3
purchased ViPNet SafeDisk and received your registration code, select Register
program (see Registering ViPNet SafeDisk on page 53).
Click Next.
ViPNet SafeDisk 3.3. User's Guide
| 43
Buying the Program (Getting a Serial
Number)
To buy a serial number:
1
On the Registration of ViPNet SafeDisk, choose Buy program (get serial number) and
click Next.
The ViPNet products order page on the Infotecs website will be displayed in your default
Internet browser. After using the website to successfully buy ViPNet SafeDisk, you will
receive a serial number by email.
2
Upon receiving a serial number, return to the Registration of ViPNet SafeDisk (see
Beginning Registration on page 42) and request a registration code (see Requesting a
Registration Code on page 45).
ViPNet SafeDisk 3.3. User's Guide
| 44
Requesting a Registration Code
To request a registration code for ViPNet SafeDisk:
1
On the Registration of ViPNet SafeDisk page, choose Request registration code and
click Next.
2
On the Registration request options page, choose the means of requesting your
registration code. To do this, choose one of the following options:
o
On the Internet (online) (see Requesting Your Registration Code on the Internet
(Online) on page 45).
o
By email (see Requesting Your Registration Code by Email on page 48).
o
By phone (see Requesting Your Registration Code by Phone on page 49).
o
Using file (see Receiving Your Registration Code from the Administrator on page
51).
Figure 19: Choosing the way to register your ViPNet SafeDisk
3
Click Next.
Requesting Your Registration Code on the Internet (Online)
ViPNet SafeDisk 3.3. User's Guide
| 45
Warning: For requesting a registration code on the Internet you need an Internet
connection.
If you select On the Internet (online), the Registration data page will be displayed.
Figure 20: The Registration data page
On the Registration data page:
1
In the Serial number box, type your serial number.
Note: If you do not have a serial number, make request to purchase it (see Buying the
Program (Getting a Serial Number) on page 44).
If you have ever previously typed your serial number in this box, your serial number
will be entered automatically.
2
In the User name box, type your name to be used when issuing your license and
contacting you. This box is optional. By default, the user name you have typed at the
ViPNet SafeDisk installation will be displayed.
3
In the Company box, type your company name. This box is optional. By default, the
company name you have typed at the ViPNet SafeDisk installation will be displayed.
4
In the Email box, type your e-mail address which will be used to contact you in case of
need.
ViPNet SafeDisk 3.3. User's Guide
| 46
Warning: We will not sell, distribute or lease your e-mail addresses. We are committed
to ensuring that your information is secure. In order to prevent unauthorized access or
disclosure we have put in place suitable physical, electronic and managerial procedures
to safeguard and secure the information we collect from you.
5
In the Additional information box, feel free to type any additional information. For
example, you can type here how to contact you or post some problems or suggestions on
ViPNet registration utility or ViPNet software in the whole.
In the Computer code box, a code that uniquely identifies your computer is displayed.
You cannot change this value.
6
Click Next. The page, showing your registration request status, will be displayed. On this
page you will also see how much time elapsed since you had begun your registration
request. Please note, that you have no more than three minutes to complete your online
registration request.
Figure 21: Waiting for a response from the Infotecs registration server
If within the three minutes a connection to the Infotecs registration server is not
established, the corresponding message will be displayed.
Figure 22: The message about connection failure
ViPNet SafeDisk 3.3. User's Guide
| 47
When a connection to the Infotecs registration server is established successfully but you
have supplied incorrect data, the message informing you about it will also be displayed.
Click OK to return to the Registration data page.
If you are refused in registration, you will also be returned to the Registration data
window. In this case, you need to check your serial number and try to register again.
If online registration was successful the Registration of ViPNet SafeDisk was successful
page will be displayed. This page will also display some suggestions on how to securely
backup your registration data (see Saving Registration Data on page 55).
7
Click Finish.
Requesting Your Registration Code by Email
Warning: For requesting a registration code on the Internet you need an Internet
connection.
If you select By email, the Registration data page will be displayed. On the Registration data
page:
1
Provide all your data as described in Requesting Your Registration Code On the Internet
(Online) (on page 45).
2
Click Next. An email summarizing your registration data will be automatically opened in
your default email application. It will be addressed to [email protected].
ViPNet SafeDisk 3.3. User's Guide
| 48
Figure 23: Requesting your registration code by email
Warning: We do not recommend you to modify anything in this auto-generated email.
3
To complete the procedure, send this email. When Infotecs has checked your registration
data, you will receive your registration code in response.
Warning: If you do not receive a response e-mail from Infotecs for a long period of
time, you may try to resend your email. To do this, repeat all steps described in this
topic. If you still cannot register your ViPNet SafeDisk, contact Infotecs Support Team.
4
Upon receiving a response email with registration code, register your ViPNet SafeDisk
(see Registering ViPNet SafeDisk on page 53).
Requesting Your Registration Code by Phone
If you select By phone, the Registration request by phone page will be displayed.
ViPNet SafeDisk 3.3. User's Guide
| 49
Figure 24: Requesting your registration code by phone
This page displays all the data you need to tell Infotecs.
1
Call Infotecs on the phone number specified at the top of the window and request a
registration code.
2
When you receive the registration code, click Next. The Register page will be displayed.
Figure 25: The Register page
3
On the Register page type your serial number and registration code, then click Next.
ViPNet SafeDisk 3.3. User's Guide
| 50
Note: If you have ever previously typed your serial number in this box, your serial
number will be entered automatically.
If you provided correct data, the Registration of ViPNet SafeDisk was successful page
will be displayed. This page will also display some suggestions on how to securely backup
your registration data (see Saving Registration Data on page 55).
4
Click Finish.
Receiving Your Registration Code from the Administrator
The idea behind registering using a file is to delegate the registration code receiving process to
your ViPNet network administrator. This means that you personally do not request your
registration code from Infotecs. Instead you use the Registration of ViPNet SafeDisk Wizard
to collect your registration data and then pass it to your ViPNet network administrator.
Note: If you would like to register only one copy of ViPNet SafeDisk using a file, first
complete actions 1–6 described in this chapter and then follow the instructions given in
the chapter System Administrator Actions for Registration Using a File (on page 56).
Then, complete the step 7 to register your copy of ViPNet SafeDisk (see Registering
ViPNet SafeDisk on page 53).
It is your ViPNet network administrator, who collects your and other ViPNet users’ registration
data and sends it to Infotecs. It is your ViPNet network administrator, who obtains your and
other ViPNet users’ registration codes and then passes them to you and your fellow ViPNet
users. Upon receiving your registration code from your ViPNet network administrator you can
register your ViPNet SafeDisk.
To register your ViPNet SafeDisk using a file:
1
On the Registration request options page, choose Using file. The Registration data
page will be displayed.
2
Provide all your data as described in Requesting Your Registration Code on the Internet
(online) (on page 45). Click Next.
3
On the Saving registration data page, click Browse and select the folder that will store
the file containing your registration data.
ViPNet SafeDisk 3.3. User's Guide
| 51
Figure 26: Saving registration data to a text file
4
Click Next. The registration data is saved in a text file named after the serial number of the
program: <serial number>.txt.
Figure 27: Further instructions on registration using a file
5
Click Finish.
6
Send the file containing your registration data to your system administrator.
7
When you receive your registration code from your system administrator, register your
ViPNet SafeDisk (see Registering ViPNet SafeDisk on page 53).
ViPNet SafeDisk 3.3. User's Guide
| 52
Registering ViPNet SafeDisk
Upon receiving registration code from Infotecs, you can register your ViPNet SafeDisk. To do
this:
1
Launch the Registration of ViPNet SafeDisk (see Beginning Registration on page 42).
2
On the first wizard page, choose Register program and click Next.
3
On the Serial number page, type your serial number.
Figure 28: Typing your serial number when registering your ViPNet SafeDisk
Note: If you have ever previously typed your serial number in this box, your serial
number will be entered automatically.
4
On the Registration Code page:
o
you personally sent a request for a registration code, select Single registration and
type the registration code.
o
your system administrator sent a request for a registration code, select Using file, click
Browse and locate the file on your network that contains the registration code.
ViPNet SafeDisk 3.3. User's Guide
| 53
Figure 29: Choosing registration type and typing registration code
5
Click Next. If you provided correct data, the Registration of ViPNet SafeDisk was
successful page will be displayed:
Figure 30: Registration completed successfully
6
Click Finish.
7
Back up your registration data (see Saving Registration Data on page 55) by copying your
registration file to a secure location. The file offmanager.brg is located in the same folder
as the ViPNet SafeDisk application.
ViPNet SafeDisk 3.3. User's Guide
| 54
Saving Registration Data
The registration process saves registration data to the *.brg file, which is created in one of the
following folders:

C:\ProgramData\InfoTeCS\ViPNet SafeDisk\
for the operating systems Windows
Vista, Windows 7 and Windows Server 2008;

С:\Documents and Settings\All Users\Application Data\InfoTeCS\ViPNet
SafeDisk\
for the operating systems Windows XP and Windows Server 2003.
Note: The name of the *.brg file depends on the ViPNet program version.
We recommend you to save this file in a secure place because it will be useful in some cases of
re-installation (for example, if you need to install the program into another folder on your
computer, or you need to re-install the program after formatting your hard drive). In such cases,
you should unload the program, move the saved *.brg file back into the folders mentioned
above, and then start the program anew. Upon start, ViPNet SafeDisk will be registered
automatically (as long as the registration data are valid and the configuration of your computer
has not changed).
Registration data (serial number, computer code, registration code, and more) is also stored in a
registration log file named reginfo.txt, located in the ViPNet SafeDisk installation folder.
You can use nformation from this file for manual registration of the program after re-installation
(for example, if the *.brg file has been lost).
If the Configuration of Your Computer Has Been Changed
Changes in computer configuration may influence the work of ViPNet Manager installed on this
computer. If your upgrade was substantial (you replaced almost all hardware in your PC) you
will need to register your ViPNet Manager once again (see Requesting a Registration Code on
page 45). If you made only minor changes to your computer’s configuration, you will not have
to register your ViPNet Manager again.
At the first ViPNet Manager startup after minor upgrade the message will be displayed
informing you that your computer’s configuration has been changed and a new *.brg file has
been created. This means that your previous registration data became obsolete. You will not be
able to register your ViPNet Manager using those data after its reinstallaion.
That is why you should copy this updated *.brg file into the secure location. If you reinstall
ViPNet SafeDisk on this computer, you should copy this very file to the ViPNet SafeDisk
installation folder. Only after that the application will consider itself registered.
ViPNet SafeDisk 3.3. User's Guide
| 55
System Administrator Actions for
Registration Using a File
Registration using file allows a company to request and receive registration codes for several
users via a single person. This person is normally the organization's system administrator.
To register using file, all ViPNet users must have their product's serial number. If not, they need
to buy it via the Registration of ViPNet SafeDisk (see Buying the Program (Getting a Serial
Number) on page 44).
Each user, from their computer, should have created a using file registration request (see
Receiving Your Registration Code from the Administrator on page 51). This creates a *.txt
file containing registration data, which they will send to their system administrator.
If you are a system administrator:
1
Save the files obtained from ViPNet users and containing their registration data to the
same folder.
2
When you have them all, combine them using the copy command: copy *.txt
registration.all. You can use another file name instead of registration.all.
3
Email the file to Infotecs at [email protected]. Name the email “ViPNet Registration Using
File”.
4
After Infotecs JSC has processed the request, you will receive an email with an attached
*.txt file. This file will contain registration codes for all users taking part in the group
registration. Deliver this file to users (for example via network disk) who can then register
their installed ViPNet program.
ViPNet SafeDisk 3.3. User's Guide
| 56
5
Protecting Information with
ViPNet SafeDisk
Checklist: Protecting Your Information
59
Creating a Container
60
Backup Copy of Container Keys
68
Connecting a Container
72
Formatting a Container
77
Common Workflow When Protecting Your Sensitive Information
79
Disconnecting a Container
81
Viewing and Changing Container Properties
83
Updating Container Keys
86
Changing Container File Location
88
Deleting a Container
89
ViPNet SafeDisk 3.3. User's Guide
| 57
Configuring ViPNet SafeDisk
90
ViPNet SafeDisk 3.3. User's Guide
| 58
Checklist: Protecting Your Information
To successfully protect your sensitive information and provide a fault tolerant access to this
information, you should successfully complete all the tasks in the following check list.
Note: This parent checklist contains links to subordinate checklists. Upon finishing the
subordinate checklist you should return to this parent checklist and advance to the next
task.
When a reference link takes you to a conceptual topic, return to this checklist after you
review the conceptual topic so that you can proceed with the remaining tasks.
Task
Reference
Create container(s)
Creating a Container (on page 60)
Create backup copy (s) of container keys
Creating a Backup Copy of Container
Keys (on page 69)
Regularly create a full configuration backup copy
Restoring Access to All Containers by
Restoring Configuration (on page 109)
Regularly create a container export file
Exporting a Container (on page 95)
Prepare to work under malicious user control
Checklist: Preparing to Work in
Insecure Environment (on page 129)
Always perform secure cleaning to remove traces of
all your sensitive information
Checklist: Cleaning Secure Data (on
page 142)
Tip: We recommend you to print this checklist and select the check boxes as you
advance through the tasks outlined in this checklist.
ViPNet SafeDisk 3.3. User's Guide
| 59
Creating a Container
When you run ViPNet SafeDisk for the first time or there are no created containers, the Create
Container wizard will be launched automatically as soon as the ViPNet SafeDisk main window
is shown.
If you are using free edition of ViPNet SafeDisk and already have created a container, the
message about limitations of your SafeDisk copy will be displayed.
Figure 31: The Limitations of ViPNet SafeDisk free edition message
To create a new container, either delete the container that already exists (see Deleting a
Container on page 89) or register ViPNet SafeDisk (see Registering ViPNet SafeDisk on page
41).
To create a new container:
1
Do one of the following:
o
on the toolbar, click Create
;
o
on the Container menu, select Create;
o
press Insert.
The Create Container wizard will be launched.
2
On the Create a New Container page, click the Browse button
and specify the
name and location of the new container file. Or you can use the name and location offered
by default.
ViPNet SafeDisk 3.3. User's Guide
| 60
Figure 32: Creating a new container
Click Next to continue.
3
On the Container properties page:
o
In the Container size box, specify the size of the container you are going to create.
o
When specifying your container’s size, pay special attention to the following:

You cannot create a container of the size less than 1024 Kb (1 Mb) and more than
2048 Gb.

You cannot format a container in the NTFS file system if its size is less than 3 Mb.

You cannot format a container in the FAT file system if its size is more than 2048
Mb (2 Gb).

You cannot format a container in FAT32 if its size is less that 32 Mb and is more
than 4095 Mb (4Gb).
Note: You will choose the type of the file system for your container later, when
formatting this container. However, we encourage you to think about your container
size and the file system it will use at this step.
The formatting process may take several minutes or several hours depending on the
container size and computer performance.
ViPNet SafeDisk 3.3. User's Guide
| 61
Figure 33: Specifying container properties
o
If you create a container using an external device, you can use the whole device's
memory for this container. If you select the Allocate all disk space for this container
check box, specifying the container size is not required, because the container size will
be equal to the external device’s memory. If you select this check box, all the data
stored on the external device will be deleted permanently. That is why we recommend
you to save the backup copies of your data first, and clean the external device’s
memory before creating a container.
o
In the Encryption algorithm list, choose the algorithm that will be used to encrypt the
created container. You can choose from AES or GOST.
Note: AES and GOST are symmetric encryption algorithms. The AES algorithm is the
federal encryption standard in the USA. The GOST algorithm is the standard in Russian
Federation.
o
In the Container comments box, type any comments you like. These comments will
be displayed in the main ViPNet SafeDisk window in the column to the right of the
container name. These comments will help you find the desired container in the list, so
make them concise, clear and meaningful.
o
Select the Automatically connect container after logon to ViPNet SafeDisk check
box, if you want the new container to be connected automatically when ViPNet
SafeDisk starts.
ViPNet SafeDisk 3.3. User's Guide
| 62
Tip: If you do not select the Automatically connect container after logon to ViPNet
SafeDisk check box on this step, later you can select it in the container properties.
Click Next.
4
On the Type of access to container page, specify how you will be granted access to the
new container. This means that your container will be protected by the option you select
and to access it you will be asked to confirm that you are authorized to access this
container.
Figure 34: Choosing password as a type of access to the container
You can choose one of the following options:
o
Password. The container you create will be protected by the password used for
logging on to SafeDisk.
o
Key File. The container you create will be protected by the password used for logging
on to SafeDisk and a key file. If you choose this type of access, specify the key file’s
name and location. To access this container later you will be prompted to present a
valid key file.
If you have chosen Key file as your type of access to this container, you should
complete the following additional steps:

Click the Browse button
and, in the Creating key file window, navigate to
the folder where you want to save your key file. You can use any name and
extension you like for your key file.
ViPNet SafeDisk 3.3. User's Guide
| 63
Warning: To increase security, we recommend you to use removable media to store
your key file.
Remember, if you lose your key file, it will be impossible for you to access the
container, which uses this key file as its access type.
In addition, if the key file became corrupted, the only way to restore access to your
container would be to use one of the previous backup copies of container keys. That is
why, we strongly recommend you to create a backup copy of container keys every time
you create new container. See Creating a Backup Copy of Container Keys (on page 69)
for more information.
Figure 35: Choosing key file as a type of access to the container
o
External device. The container you create will be protected by a password used for
logging on to SafeDisk and an external device inserted in a slot. To access this
container later you will asked to present a valid external device.
If you have chosen External device as your type of access to this container, you
should complete the following additional steps:

Insert the external device in a slot.

In the Choose device list, choose a token, supported by your system.
Note: Your external device’s drivers and other required software should be correctly
installed on your computer. If you do not see your device in the Choose device list,
your device’s software failed to install correctly.
Consult your external device’s documentation on how to install and configure your
ViPNet SafeDisk 3.3. User's Guide
| 64
device’s drivers for your version of Windows. For details, see Supported External
Storage Devices (on page 164).

In the Type PIN box, type a PIN (person identification number) you used to access
the chosen device.

Select the Save PIN check box if you do not want to enter PIN every time you
connect the container protected by the chosen device.
Note: To increase security, do not select the Save PIN check box.
Consult your device’s documentation on how set PIN and to configure other device’s
properties.
Figure 36: Choosing external device as a type of access to the container
5
Upon finishing, click Next. The Digital Roulette window will be displayed (in case it has
not been launched before during the current session of ViPNet SafeDisk).
ViPNet SafeDisk 3.3. User's Guide
| 65
Figure 37: Digital Roulette
Follow the instructions in the Digital Roulette window. As a result container keys will be
generated.
6
On the Finishing Container Creation page, click Finish. If you have left the Create a
backup copy of container keys check box selected, the Creating Backup Copy of
Container Keys wizard (see Creating a Backup Copy of Container Keys on page 69) will
be launched automatically.
If you have cleared this check box, your newly created container will be automatically
connected and you will be prompted to format it.
Figure 38: Completing container creation
As a result a hidden container file *.sdc (see Container file on page 174) will be created. To
display this file, in Control Panel open Folder Options and, on the View tab, select the Show
hidden files, folders, and drives check box.
ViPNet SafeDisk 3.3. User's Guide
| 66
Warning: In the current ViPNet SafeDisk version, you cannot use a file with the
Compress or Encrypt attribute (see Compress or Encrypt Attribute Is Set for the
Container File on page 159) as a container.
ViPNet SafeDisk 3.3. User's Guide
| 67
Backup Copy of Container Keys
A backup copy of container keys is required in the following cases:

you cannot access your container; however, the container file itself remains undamaged;

the key file you have chosen as the type of access to this container became corrupted;

upon converting the container into the new format, you cannot access the container created
in an earlier version of ViPNet SafeDisk;

upon updating keys, you cannot access the container;

you decided to grant access to your container to another user registered on your computer;

you decided to copy the container file (*.sdc) manually (do not use the ViPNet SafeDisk
container export feature).
Warning: Using a backup copy of container keys, you will be able to restore access to
the corresponding container only if these container’s keys were damaged. If a container
file itself is damaged, there is no other way to restore your protected information stored
in this container as to import the container file (if the corresponding container export
file has been created beforehand).
That is why we strongly recommend you to regularly created full backup copies of all
your container files (see Exporting a Container on page 95).
Starting a Wizard for Creating a Backup Copy of Container
Keys
If you are creating a backup copy of container keys afterwards, to run the Creating Backup
Copy of Container Keys wizard:
1
In the main ViPNet SafeDisk window, choose the container you want to create a backup
copy of container keys for.
2
If the container is connected, disconnect it (see Disconnecting a Container on page 81).
3
Do one of the following:
o
On the Container menu, select Backup Copy of Container Keys.
ViPNet SafeDisk 3.3. User's Guide
| 68
o
Right-click the container and, on the context menu, select Backup Copy of Keys.
The Creating Backup Copy of Container Keys wizard will be launched.
Creating a Backup Copy of Container Keys
1
On the Create a Backup Copy of Container Keys page (see Backup copy of container
keys on page 173), click Next.
2
On the Storage location of the backup copy of container keys page:
o
If you want to save a backup copy in a file on your computer, choose File from the
Protection type list.
Figure 39: Saving a backup copy in a file
Click the Browse button
and specify the folder to the container keys backup
copy in. You can always use the folder specified by default. Upon finishing, click
Next.
Tip: For security reasons, do not store your backup copy of container keys in the same
folder as a container file itself (perhaps an external device would be a better choice).
o
If you want to save the backup copy on an external device:

Choose External device from the Protection type list.
ViPNet SafeDisk 3.3. User's Guide
| 69

In the Backup copy of container keys name box, specify the name of your
backup copy.

Connect your external device to the computer or reader.

In the Choose device list, choose the device you are going to use (if it has not been
chosen automatically).

In the Type PIN box, type the PIN for your device. To save the PIN, select the
corresponding check box.

Click Next.
Figure 40: Saving a backup copy on an external device
3
Type the password for further access to the backup copy and confirm it.
ViPNet SafeDisk 3.3. User's Guide
| 70
Figure 41: Setting a user password
4
To complete the creation of a backup copy of container keys, on the Backup Copy of
Container Keys Creation Completed page, click Finish.
As a result, a file with SDE extension containing your container keys backup copy will be
created or your container keys backup copy will be saved on an external device.
ViPNet SafeDisk 3.3. User's Guide
| 71
Connecting a Container
When you are working with a newly created container, after creating a backup copy of its keys
you will be suggested to connect the container.
If you are connecting an already existing container (perhaps, you started new ViPNet SafeDisk
session), see Connecting an Existing Container (on page 75).
To connect a container:
1
Either:
o
In the Connecting Container window, click Yes.
Figure 42: A prompt to connect a container
o
2
In the ViPNet SafeDisk main window, choose a container you would like to connect,
and then do one of the following:

On the toolbar, click Connect

On the Container menu, select Connect.

Right-click the container and, on the context menu, select Connect.

Press C.
.
In the Connecting Container window:
ViPNet SafeDisk 3.3. User's Guide
| 72
o
In the Connect container as disk list, choose a drive letter which will be assigned to
your container by the Windows operating system.
Figure 43: Connecting a container
o
Select the Open container contents check box, if you want to display container’s
contents in a separate window,
o
Select the Connect container for read only check box, if you do not want the
container to be edited this session.
Note: If you are connecting a newly created container do not select the Connect
container for read only check box, for it will be impossible for you to format it. If you
have selected this check box anyway, either disconnect it and try to reconnect it or
create the container anew and this time leave this check box cleared.
o
If you work under Windows XP or Windows Server 2003 and you want to protect the
container against other users’ access, select Exclusive access.
Figure 44: Enabling exclusive access
Note: If you select the Exclusive access check box, you cannot connect container for
read only.
ViPNet SafeDisk 3.3. User's Guide
| 73
3
Click OK.
4
If you are connecting the container you have just created, you will be offered to format it.
Connecting a Container Using a Key File
1
In the Connecting Container window (see figure on page 72), click Yes.
2
If your key file has been moved from the location, which has been specified at the time of
this container’s creation, the Key File of container window will be shown.
Figure 45: Specifying location of a key file
In the Key File of container window, click the
button and navigate to the folder
where you have placed the key file to this container. Then click OK.
If you have not moved the key file, the window described above will not be shown.
Note: If the key file for your container becomes corrupted (due to hard disk damage, or
malicious users intent) the only way for you to restore access to this container is to
make use of the backup copy of container keys (see Creating a Backup Copy of
Container Keys on page 69) and then import this container (see Importing a Container
Using a Backup Copy of Container Keys on page 101).
3
In the next window (see figure on page 73), choose, how the container should be
connected. Click OK to continue.
4
If you are connecting the container you have just created, you will be offered to format it.
Connecting a Container with an External Device
1
In the Connecting Container window (see figure on page 72), click Yes.
2
Insert your token which you used when creating this container into the corresponding slot.
ViPNet SafeDisk 3.3. User's Guide
| 74
3
In the next window, in the Enter PIN box, type your PIN.
Note: To increase security, do not select the Save PIN check box.
Figure 46: Typing device's PIN when connecting a container
4
In the next window (see figure on page 73), how the container should be connected. Click
OK to continue.
5
If you are connecting the container you have just created, you will be offered to format it.
Connecting an Existing Container
To connect a previously created container:
1
In the ViPNet SafeDisk main window, choose the container you want to connect.
2
Do one of the following:
3
o
on the toolbar, click Connect
,
o
on the Container menu, click Connect,
o
press C.
Depending on the type of access you have chosen for the selected container, either:
o
if you have chosen a password as a protection type for this container, proceed to the
next step;
o
if you have chosen a key file as a protection type and this file can no longer be found
in the specified location, specify a path to the key file (see Connecting a Container
Using a Key File on page 74).
ViPNet SafeDisk 3.3. User's Guide
| 75
o
if you have chosen an external device as a protection type, present a valid external
device (see Connecting a Container with an External Device on page 74).
4
In the Connecting Container window (see figure on page 73), choose how your container
should be connected, and then click OK.
5
The connected container will be opened in a new window. Now you can work with
protected information stored on this container.
ViPNet SafeDisk 3.3. User's Guide
| 76
Formatting a Container
Before using a container, you need to format it. If you connect a container that has not been
formatted yet, then the Format Container wizard will start. To format a container:
1
On the first page, in the File system list, choose the file system for formatting.
Note: The choice of the file system depends on the container size:

You can choose FAT if your container size is more than 1 MB and less than 2
GB.

You can choose FAT32 if your container size is more than 32 MB and less than
4 GB.

You can choose NTFS if your container size is more than 3 MB.
Figure 47: Formatting a container
2
Click Next to begin the formatting process.
Note: The formatting process can take you several minutes or several hours depending
on the container size and the computer performance.
ViPNet SafeDisk 3.3. User's Guide
| 77
3
Upon the formatting process is finished, on the last page of the wizard, click Finish.
Container is ready and connected.
ViPNet SafeDisk 3.3. User's Guide
| 78
Common Workflow When Protecting
Your Sensitive Information
Once you have created all containers, we recommend you to use the following workflow to
protect your sensitive information on an everyday basis:
1
Start ViPNet SafeDisk (see Starting ViPNet SafeDisk on page 28).
2
In the main ViPNet SafeDisk window, choose the container with your information.
3
Connect the chosen container by clicking Connect
. The Connecting Container
window (see figure on page 73) will be shown. Specify connection parameters, and then
click OK.
For more information on how to connect a container see Connecting a Container (on page
72).
4
Double click the connected container. Now you can work with the container disk as you
usually work with Windows disks. Save documents and files you want to protect to this
disk or save changes to files stored on this disk.
Note: Before you start working with container, read the chapter Container Access
Security (on page 119).
5
When you want to finish working with protected information, deny access to it by closing
all the files stored in the container and closing the Explorer window listing the container
files. In the main window, choose the container and click Disconnect
. When you
disconnect the container, the access to your protected information is blocked and any
evidence of such information on your computer will be hidden.
6
Close ViPNet SafeDisk (see Finishing the Work with ViPNet SafeDisk on page 29).
ViPNet SafeDisk Container Icons
The table below describes ViPNet SafeDisk container icons and their meaning and purpose.
ViPNet SafeDisk 3.3. User's Guide
| 79
Table 3. ViPNet SafeDisk container icons
ViPNet
SafeDisk
container icon
Description and guidelines
Container is ready but not connected.
Container is ready and connected. You can work with it as with common Windows
disk.
Container has been created but now not available (perhaps the container file was
placed on a remote drive which is now not accessible).
Container is damaged. Either container file or container protection key is damaged.
For more information, see Restoring Access to Protected Information (on page
105).
ViPNet SafeDisk 3.3. User's Guide
| 80
Disconnecting a Container
Containers should be disconnected to hide your protected information. Moreover, you can
perform some actions only when your container is disabled, for example, change the container
properties, export the container, or create a container keys backup copy.
To disconnect a container:
1
In the main window, choose the container to be disconnected. Connected containers are
displayed as
, disconnected ones — as
.
Figure 48: Connected and disconnected containers
2
Close all the files stored in this container and close the Explorer window which shows the
container files.
3
In the main window, do one of the following:
o
on the toolbar, click Disconnect
;
o
right-click the container and, on the context menu, select Disconnect;
ViPNet SafeDisk 3.3. User's Guide
| 81
o
on the Container menu, select Disconnect;
o
press D.
If you need to disconnect all the containers at once, either:
4
o
on the toolbar, click Disconnect All
;
o
on the Container menu, select Disconnect All;
o
press Alt+D.
If for some reason you cannot disconnect your container (for example, the files stored in
the container are being used by some other application), the corresponding warning will be
displayed.
To force your container disconnection, in the warning window, select the Force
disconnection and click Retry.
Warning: When you force your container disconnection, the opened documents would
not close. You have to close them manually.
Tip: To disconnect all the containers immediately when malicious users approach,
enable the Danger mode (see Immediate Denial of Access to Protected Information.
Danger Mode on page 131).
ViPNet SafeDisk 3.3. User's Guide
| 82
Viewing and Changing Container
Properties
To view and (or) change the properties of a container:
1
In the main ViPNet SafeDisk window, choose a container and disconnect it (see
Disconnecting a Container on page 81).
2
Do one of the following:
3
o
on the toolbar, click Properties
;
o
on the Container menu, select Properties;
o
right-click the container and, on the context menu, select Properties;
o
press Alt+Enter.
In the Container properties dialog box, on the Container tab, configure the selected
container’s general options. You can:
o
Change the name and the location of the container file (see Changing Container File
Location on page 88).
o
Write your comments for the selected container.
o
Select or clear the Automatically connect container after logon to ViPNet SafeDisk
check box.
o
Prevent the contents of the selected container from being modified (the Connect
container for read only check box).
ViPNet SafeDisk 3.3. User's Guide
| 83
Figure 49: Viewing and changing container’s properties
On the Container tab, you can also view the container keys creation date and update these
keys (see Updating Container Keys on page 86) when needed by clicking Update keys.
Note: You cannot change container’s size and encryption algorithm.
4
In the Container properties dialog box, on the Protection type tab, configure how the
selected container is protected.
Figure 50: Configuring protection type for the selected container
To configure protection type of the selected container, in the Container protection type
list, choose either:
ViPNet SafeDisk 3.3. User's Guide
| 84
o
Password. This means that the password you used to log on to ViPNet SafeDisk will
be enough to access this container.
o
Key file. This means that to access this container you will need the password you used
to log on to ViPNet SafeDisk and a keys file.
Provide a path to the key file.
Warning: To increase security we recommend you to use removable media to store
your key file.
o
External device. This means that to access this container you will need the password
you used to log on to ViPNet SafeDisk and an external device inserted in one of the
available slots. Depending on the external device you use you may be asked to provide
the PIN (personal identification number) to access the device.
In the Choose device list, choose a desired token. Then, in the Type PIN box, type
your PIN for the chosen token.
Note: ViPNet SafeDisk supports several types of external devices. For more
information on external devices, see Supported External Storage Devices.
5
Upon finishing, click OK to save your changes. Click Cancel if you do not want to save
any changes you have made.
ViPNet SafeDisk 3.3. User's Guide
| 85
Updating Container Keys
To increase the security of information stored in ViPNet SafeDisk containers you can update
your container keys, in other words the keys that are used to encrypt information stored in your
container. After the container keys are updated, you cannot access your container using old keys
or the old keys backup copy. We recommend you to update your container keys at least once in
15 months. You can view the container keys creation date in the Container properties dialog
box (see figure on page 84), on the Container tab.
To update the container keys:
1
In the main ViPNet SafeDisk window, choose the container you want to update the
container keys for.
2
Do one of the following:
o
On the Container menu, select Update Keys.
o
Right-click the container and, on the context menu, select Update Keys.
Figure 51: Update container keys
o
In the Container properties dialog box (see figure on page 84), on the Container tab,
click Update keys.
The Update Container Keys wizard will be started.
3
On the Update Container Keys page, click Next.
The page with the updating process status bar will be displayed. To stop the process, click
Stop.
4
Upon the container keys have been updated successfully, the Container keys updating
completed page will be displayed.
ViPNet SafeDisk 3.3. User's Guide
| 86
Figure 52: Completing the container keys updating
By default, on this page, the Create a backup copy of container keys check box is
selected. To create your container keys backup copy later on, clear this check box.
Warning: The container keys backup copy is intended for restoring access to your
container in case its keys are damaged. Thus, we strongly recommend you to create
your container keys backup copies.
If you let some other users use your container keys backup copy to get access to the
container on your computer (see Providing Access to Your Container for One or More
Users on the Same or Different Computer on page 120) they will not be able to access
your container after updating. For other users to access your container, provide them
with the new keys backup copy.
5
To close the wizard, click Finish.
ViPNet SafeDisk 3.3. User's Guide
| 87
Changing Container File Location
For your convenience, you can move container files to another folder, an external device, a
remote network disk or write them on a CD.
To move a container file to another folder, an external device or a remote network disk:
1
Open the container properties window.
2
In the Container properties window, on the Container tab, in the Container file box,
specify a full path to the container file.
3
Click OK.
A container file will be moved to the specified location.
If you are going to work with a container on a CD, then, upon the container file has been written
on a CD, specify the new path to the container file in the container properties window. A
container written on a CD is available only for reading. Therefore, for a trouble-free work with
this container, select the Connect container for read only check box.
Warning: ViPNet SafeDisk can work only with the container files written on CDs of
the ISO or ISO+Joilet format.
ViPNet SafeDisk 3.3. User's Guide
| 88
Deleting a Container
Before deleting a container, make sure that you can restore information stored on this container
in case of need. To do this, make sure, that either:

the relevant container export file (*.sdx) is created, or

the backup copy of container keys (*.sde) is created and is copied to secure location along
with container file (*.sdc).
Warning: If you have not created any of these files, you will not be able to restore
information from a deleted container.
If you want to delete a container:
1
Disconnect the container (see Disconnecting a Container on page 81) (if connected).
2
Select the container and then do one of the following:
3
o
right-click it and select Delete;
o
on the Container menu, select Delete;
o
left-click the container and press Delete.
In the Delete Container window, select the I really want to delete this container and I
understand that it will be impossible to restore its contents check boxes.
Figure 53: The message warning you about the deletion of the selected container
4
Click Delete container.
ViPNet SafeDisk 3.3. User's Guide
| 89
Configuring ViPNet SafeDisk
To configure ViPNet SafeDisk general settings:
1
On the SafeDisk menu, click Options. The Options dialog box will be displayed.
2
In the navigation pane, click General.
Figure 54: ViPNet SafeDisk general settings
3
If you need to run ViPNet SafeDisk automatically upon logon to Windows, select the
Automatically run SafeDisk when Windows starts check box.
4
If you do not want to show the ViPNet SafeDisk icon in the notification area, clear the
Show icon in the Windows notification area check box (selected by default).
5
To specify the period of standby after which containers will be disconnected automatically,
select the Disconnect containers in case they are inactive within check box and type or
select the necessary period (in minutes; the default standby period is 60 minutes).
6
For the Recent folder to be cleaned securely and automatically each session, select the
Securely delete recent documents after container disconnection check box.
7
To change the key combination to maximize the main ViPNet SafeDisk window, click
inside the Activate SafeDisk main window using the following shortcut key box and
press the necessary keys.
ViPNet SafeDisk 3.3. User's Guide
| 90
8
To choose an action to be done after clicking the Close button
in the main ViPNet
SafeDisk window, in the When closing SafeDisk main window list, select Request
action, Minimize window without exiting SafeDisk or Exit SafeDisk.
9
If you have made any changes, click Apply, then OK. Click Cancel to discard changes.
ViPNet SafeDisk 3.3. User's Guide
| 91
6
Exporting and Importing
Protected Information
Why Do You Need It?
93
Exporting a Container
95
Importing a Container to a PC
98
ViPNet SafeDisk 3.3. User's Guide
| 92
Why Do You Need It?
You may find it useful to work with your protected information not only at your working place
but at other locations. For example, you went to dinner and decided to take some important
report with you to finish it. To do this you should be able to transfer the container holding your
protected information from your office computer to your personal laptop. ViPNet SafeDisk
allows you to do this sort of thing. This operation is called exporting and can be useful both in
the situation described above and for creating backup copies of your containers.
Let us move a little further in our discussion. Suppose, you have exported your container to your
laptop, finished your report and now you should send it to your boss or check it in into
document versioning system. Suppose further, that you can do it only from your office computer
(perhaps due to security reasons). To accomplish this task, you should move the finished report
from your laptop to your office computer. Since your report contains very sensitive information,
you cannot copy and paste it using standard tools (USB drive, diskette or other removable
media). The report should remain encrypted. You can accomplish this task using ViPNet
SafeDisk. To do this, you should use ViPNet SafeDisk on your laptop to export the container
holding your report and use ViPNet SafeDisk on your office computer to import this container.
The latter operation in ViPNet SafeDisk is called importing. As in the former example, you can
use importing to restore your containers from backup copies.
In addition, consider the following situation. You are going on vacation. However, some urgent
changes to the project vision you created should be made during your vacation. Your project
vision contains sensitive information and cannot be transferred openly to the person who is
entitled to make changes to it while you are on vacation. To solve this issue you can also use
ViPNet SafeDisk exporting and importing features. In short, to transfer your project vision to
another person securely you should export your container and pass it along with the password
you used when exporting it to this person. This person should import this container using the
password you used when exporting this container. Upon completing this, the other person will
be able to work with your protected information as if it was you yourself.
Let us summarize business scenarios, where you can enjoy ViPNet SafeDisk exporting and
importing features:

backup and restore your sensitive protected information;

transfer sensitive information between two or more computers (this scenario includes the
data transfer over network (FTP, HTTP) or sending data with a courier; even if data being
transferred is intercepted, it will be impossible to make anything out of it because it is
encrypted);

pass your sensitive information to another person while you are out of office;
ViPNet SafeDisk 3.3. User's Guide
| 93

upgrading the program to version 3.3.0. During the upgrading process, containers will be
converted. We recommend you to export the containers before upgrading. This will allow
you to work with the container in an earlier version of ViPNet SafeDisk.
ViPNet SafeDisk 3.3. User's Guide
| 94
Exporting a Container
When you export a container you create a so called container export file. You should export a
container, if you want to:

create a backup copy of all your sensitive information stored in this container;

transfer all your sensitive information with a courier, over a network or give it to your
colleague while you are out of office.
To export a container:
1
In the main ViPNet SafeDisk window, choose the container you want to export. If the
container is connected, disconnect it (see Disconnecting a Container on page 81).
2
On the Container menu, click Export.
3
In the Export Container wizard, on the Export a Container page, specify the name and
location of the container export file. Click the Browse button
, to navigate to the
folder where you want to save your container export file or use the file name and location
offered by default. Then click Next.
Figure 55: Exporting a container
ViPNet SafeDisk 3.3. User's Guide
| 95
Tip: To increase security, store your container export file in a different location than
your container file (perhaps a removable media will be a good choice).
4
Type your password and confirm it. You will use this password when you try to import
this container. Then click Next.
Figure 56: Setting the password to a container export file
5
On the Container properties page, specify the properties of the container being exported:
o
Select the Open container for read only check box to prevent the exported
container’s contents from being modified.
o
Select the Automatically connect container upon logging to ViPNet SafeDisk check
box, if you want the exported container to be automatically connected when you
import it.
Click Next.
ViPNet SafeDisk 3.3. User's Guide
| 96
Figure 57: Specifying container properties for export
6
In the next window, click Finish.
As a result of your actions a container export file *.sdx (see Container export file on page
173) will be created. This container export file contains both container file and backup
copy of this container’s keys.
Now you can transfer the container export file to another computer using a removable
media, for example, a CD-ROM or a USB flash. You can also send it over a network (over
FTP, HTTP, and so on).
ViPNet SafeDisk 3.3. User's Guide
| 97
Importing a Container to a PC
Importing a Container from a Container Export File
You should import a container from this container’s export file, if you want to:

restore all your protected information from a backup copy;

to work with your colleague’s sensitive data while he or she is on vacation or out of office.
To import a container from a container export file you should have:

container export file (*.sdx);

password used for creating this container export file.
To import a container from the container export file:
1
On the Container menu, select Import. The Import Container wizard will be displayed.
2
On the Import a Container page, choose File and click Next.
Figure 58: Importing a container wizard
ViPNet SafeDisk 3.3. User's Guide
| 98
3
On the Protection password page, click the Browse button
and specify the path to
the container export file. For faster search, select the Export of SafeDisk container
(*.sdx) file type from the Save as type list.
Figure 59: Typing a password to access the selected export file
4
In the Type password box, specify the password which was used when exporting the
container. Then click Next.
5
On the Container File page, specify the name and the location of the container file, in
which the container you are currently importing will be placed.
Figure 60: Specifying the container file location
ViPNet SafeDisk 3.3. User's Guide
| 99
6
If the container file specified on the previous step already exists, on the Created container
already exists page, you should choose, whether you completely replace the existing
container or you just want to replace keys of the existing container.
Figure 61: Message informing you that the container you are trying to import already exists
7
If you do not want the container to be connected right after importing it, on the Container
Importing Completed page, clear the Connect container check box.
Click Finish.
Figure 62: Completing container import
ViPNet SafeDisk 3.3. User's Guide
| 100
As a result of your actions a new container, which itself is a replica of the container being
imported, will be created. This container will be displayed in the main ViPNet SafeDisk
window.
Importing a Container Using a Backup Copy of Container
Keys
You should import a container by means of a backup copy of its keys in the following cases:

Container keys have been damaged. If the container file itself is undamaged, you can
restore access to this container using backup copy of these container keys (see Restoring
Access to Protected Information on page 105).

You have used a key file as a protection type for your container. Unfortunately, the key
file have been deleted or lost. To restore access to your container you should use the
corresponding backup copy of container keys.

Colleague of yours is out of office and you should finish some sensitive work for her. She
allowed you to access her computer and created a different user in ViPNet SafeDisk (see
Controlling Access to Protected Information. Registering a New User on page 116).

You have acquired the container file (not the container export file) along with the backup
of this container’s keys. Now you need to connect it to make some changes to sensitive
information stored on this container.
To import a container using a backup copy of container keys:
1
On the Container menu, select Import. The Import Container wizard will be started.
2
On the Import a Container page:
o
o
If the container keys backup copy is saved in a file on your computer:

Choose File and click Next.

On the Protection password page, click the Browse button
and specify the
location of the container keys backup copy. For faster search, select the Backup
Copy of SafeDisk Container Keys (*.sde) file type from the Save as type list.

In the Type password box, specify the password which was used when creating
the container keys backup copy. Then click Next.
If the container keys backup copy is stored on an external device:
ViPNet SafeDisk 3.3. User's Guide
| 101

Choose External device and click Next. The Choose external device page will be
displayed.
Figure 63: Choosing an external device

Connect your external device to the computer or reader.

In the Choose device list, choose the device you are going to use (if it has not been
chosen automatically).
Note: The container keys backup copy (see Creating a Backup Copy of Container
Keys on page 69) should be stored on the external device in advance.

In the Type PIN box, type the PIN for your device. To save the PIN, select the
corresponding check box.
ViPNet SafeDisk 3.3. User's Guide
| 102

Click Next. The Choose backup copy of container keys page will be displayed.
Figure 64: Choosing a backup copy
3

In the list of backup copies, choose the one you are going to use to import a
container.

Type the password to get access to the container keys backup copy and click Next.
If a backup copy of container keys and container file are located in different folders, on the
Container File page, click the Browse button
container file.
and specify the location of the
Figure 65: Specifying a path to the container file
ViPNet SafeDisk 3.3. User's Guide
| 103
4
On the Type of access to container (see figure on page 84) page, specify how you will
access the container being imported. You can choose one of the following values:
Password, Key file or External device.
If you choose Key file or External device, configure available additional options (see
Creating a Container on page 60).
5
If you do not want the container to be connected right after importing it, on the Container
Importing Completed (see figure on page 100) page, clear the Connect container check
box.
Click Finish.
As a result of your actions:
o
if you were restoring access to the container and the container file is undamaged,
access to your container would be restored.
o
if you were using a backup copy of container keys to import a container file, the
container file will be imported and you will be able to work with its contents.
Note: When you import your container from container export file a new container,
which is a replica of the container being imported, is created.
When you import a container file using backup copy of this container’ keys you will be
granted access to the container itself (no replica is created).
ViPNet SafeDisk 3.3. User's Guide
| 104
7
Restoring Access to Protected
Information
Why Do You Need It?
106
Restoring Protected Information. Best Practices
107
Restoring Access to All Containers by Restoring Configuration
109
ViPNet SafeDisk 3.3. User's Guide
| 105
Why Do You Need It?
The information is invaluable. If the information is lost or has been made available to
unauthorized or malicious personnel, you will have to face serious consequences from minor
issues to great financial losses. That is why since computers came into our business life, every
company strives to make its best to secure its sensitive and confidential information.
One of the common techniques allowing you to secure your information and to quickly restore it
in case of force majeure is to regularly make backup copies of it. If something happens to your
current revision of information, you will be able to restore the previous revision from its backup
copy. Even if you lose some minor changes, the bulk of your information will be successfully
restored and you will be able to quickly return to the business process you have accustomed to.
ViPNet SafeDisk allows you to leverage the protection of your sensitive information by creating
backup copies of all your containers as well as a single container or container keys.
ViPNet SafeDisk 3.3. User's Guide
| 106
Restoring Protected Information. Best
Practices
For better security, ViPNet SafeDisk gives you several ways to restore confidential information.
This will help you to continue working with confidential information quickly in case of failures.
The table below lists some common problems you may encounter in your everyday tasks when
protecting your sensitive information and gives corresponding instructions how to overcome
these problems.
Table 4. Recommendations on restoring protected information
Problem
Solution
Access to all
containers is denied
In this case, the best way to restore access is by Restoring
Configuration. A configuration backup copy should be made in
advance and container files should not be damaged. More
information (see Restoring Access to All Containers by
Restoring Configuration on page 109).
Access to one or
several containers is
denied
In this case, restore access to these containers by means of the
corresponding backup copy of container keys. This operation will
succeed, if the container file itself is not damaged. More
information (see Importing a Container Using a Backup Copy of
Container Keys on page 101).
You want to change
protection type for
your container
You can change the protection type to container in the Container
Properties window (see Viewing and Changing Container
Properties on page 83), on the Protection type tab. You can also
import the container using a backup copy of container keys and
change the protection type during import (see Importing a
Container Using a Backup Copy of Container Keys on page
101).
Container file has
been damaged
In this case, restore your data by importing the container export
file made beforehand.
Disk failure. Only
backup copy of
container keys
survived
There is no way to restore all your confidential data if the
corresponding container file is damaged and there is no container
export file. In this case, try to recover your container file from the
failed hard disk. If you succeed, you will be able to import this
container using backup copy of this container’s keys.
Anyway, the best way to overcome this problem is to regularly
make backup copies of container file (see Exporting a Container
ViPNet SafeDisk 3.3. User's Guide
| 107
Problem
Solution
on page 95).
Disk failure. Only
container file
survived
There is no way to restore all your confidential data, if a container
file survived, but a backup copy of this container’s keys not.
In this case, try to recover the corresponding backup copy of
container keys (if it was ever made). If you succeed, you will be
able to import this container using the backup copy of this
container’s keys.
Anyway, the best way to overcome this problem is to regularly
make backup copies of container file (see Exporting a Container
on page 95).
Warning: To facilitate protected information backup and restore, we strongly
recommend you to regularly perform the following tasks:

create a container export file;

create a backup copy of container keys;

create a configuration backup copy.
If you follow these recommendations you will be able to successfully restore all your
protected information in case of failures or force majeure and minimize time spent to
recover information created since the most recent backup copy had been made.
ViPNet SafeDisk 3.3. User's Guide
| 108
Restoring Access to All Containers by
Restoring Configuration
If access to all containers is denied, the best way to restore protected information is restore
configuration.
To restore a particular ViPNet SafeDisk configuration, a backup copy should be created in
advance. You can create as many backup copies as you need.
Backup copies of your ViPNet SafeDisk configuration are also created automatically when you
close the program or restore configuration.
Creating a Configuration Backup Copy
A configuration backup copy is used to restore current program configuration.
Warning: If multiple users work with the same ViPNet SafeDisk program copy, each
user should create their own configuration backup copies. Each user will have access
only to his personal configuration backup copies.
To create a configuration backup copy:
1
Disconnect all connected containers (see Disconnecting a Container on page 81).
2
On the SafeDisk menu, select Restore Configuration. The Restore ViPNet SafeDisk
Configuration wizard will be started.
3
On the Restore ViPNet SafeDisk Configuration page, select Create a backup copy of
the current configuration. Click Next.
ViPNet SafeDisk 3.3. User's Guide
| 109
Figure 66: Restore ViPNet SafeDisk Configuration Wizard
4
On the Configuration backup creation page, in the Type a comment for your backup
box, type a comment that describes the configuration. Writing a comment is not
obligatory, but, if the backup is ever required, it will help you to find the backup from the
backup list. The maximum number of characters you can enter for aNew comment is 200.
Click Next. The configuration backup copy will be created.
Figure 67: Creating a backup copy of current configuration
5
To close the wizard, click Finish.
To initiate another backup operation, click Home.
ViPNet SafeDisk 3.3. User's Guide
| 110
Editing the Configuration Backup Copies List
You can edit your list of configuration backup copies: remove configuration copies or edit
comments.
To edit your configuration backup copies list:
1
Disconnect all containers (see Disconnecting a Container on page 81).
2
On the SafeDisk menu, select Restore Configuration. The Restore ViPNet SafeDisk
Configuration wizard will be started.
3
On the Restore ViPNet SafeDisk Configuration page, select Edit backups list and click
Next.
4
On the Edit information about available backup copies page, in the Configuration
backups list, select the backup copy you need to edit. If you want to edit a comment to it,
click Edit comment. If you need to delete it, click Delete and confirm deleting.
Configuration backup copies are automatically sorted by date and time of creation. To
change the sort order, click either the Creation date and time or Comment column
headings.
Figure 68: Editing the list of backup copies
5
To complete editing, click Next.
6
To close the wizard, click Finish.
To initiate another backup operation, click Home.
ViPNet SafeDisk 3.3. User's Guide
| 111
Restoring a Configuration
To restore ViPNet SafeDisk configuration from a previously created backup copy:
1
Disconnect all containers (see Disconnecting a Container on page 81).
2
On the SafeDisk menu, select Restore Configuration. The Restore ViPNet SafeDisk
Configuration wizard will be started.
3
On the Restore ViPNet SafeDisk Configuration page, select Restore ViPNet SafeDisk
configuration, and then click Next.
If the option is unavailable, it means that no configuration backup copy has been made. In
this case, restore access to the container by importing using the corresponding backup
copy of container keys (see Importing a Container Using a Backup Copy of Container
Keys on page 101) or from the relevant container export file.
4
On the Choose configuration backup page, a list of all backups, whether created
automatically or manually will be displayed.
Figure 69: Choosing a backup copy
Configuration backup copies are automatically sorted by date and time of creation. To
change the sort order, click either the Creation date and time or Comment column
headings.
Choose the ViPNet SafeDisk configuration backup copy you want to recover from and
click Next.
5
If your ViPNet SafeDisk user password had been changed since you created the
configuration backup copy you try to restore, on the Password page, you will be asked to
provide your user password, which was valid at the time when you created this backup.
ViPNet SafeDisk 3.3. User's Guide
| 112
Figure 70: Typing a password which was valid when this backup copy was created
6
The process of restoration of the chosen ViPNet SafeDisk configuration will be started.
7
To close the wizard, click Finish.
To initiate another backup operation, click Home.
Warning: If restoring configuration did not help you to solve the problem and access to
containers is still denied, the container files are probably damaged. In this case, import
each container from the container export file. The container export files should be
created beforehand (see Exporting a Container on page 95).
Cancelling the Last Configuration Restore
If restoring configuration did not solve your problem, you can try to revert to the previous
configuration. To do this, you should cancel your last configuration restore.
To cancel the last configuration restore:
1
Disconnect all containers (see Disconnecting a Container on page 81).
2
Do one of the following:
o
On the SafeDisk menu, select Restore Configuration.
o
On the last page of the Restore ViPNet SafeDisk Configuration wizard, click Home.
ViPNet SafeDisk 3.3. User's Guide
| 113
3
In the Restore ViPNet SafeDisk Configuration wizard, select Undo last configuration
restoration. Then lick Next.
Figure 71: Undo last configuration restoration
4
To close the wizard, click Finish.
To initiate another backup operation, click Home.
ViPNet SafeDisk 3.3. User's Guide
| 114
8
Using ViPNet SafeDisk
in a Team
Controlling Access to Protected Information. Registering a New User
116
Sharing Your Containers
118
Protecting Information Stored on a Server
125
Transferring Confidential Information with a Courier or via Network
127
ViPNet SafeDisk 3.3. User's Guide
| 115
Controlling Access to Protected
Information. Registering a New User
ViPNet SafeDisk is a multi-user program allowing each user to work independently on his own
protected data.
You should register a new ViPNet SafeDisk user in the following situations:

The same laptop is shared by employees on business trips. Using ViPNet SafeDisk each
user can store her own confidential information. Any other user will have no idea what
stored on other user’s containers and even that such information really exists.

There are several user accounts on your computer. Each account belongs to different
persons. Some of these persons want to use ViPNet SafeDisk to protect their confidential
information

You are going on vacation and want your colleague to continue working with your
documents. This colleague does not have ViPNet SafeDisk installed on her computer. If
you do not want her to access all your containers, you can create local user account in your
operating system, create another user in ViPNet SafeDisk and give her a backup copy of
keys belonging to the container, with which she will be allowed to work.

You want to create a dummy user. You will later use this user account to create fake
containers and populate them with fake data. You will log on to ViPNet SafeDisk using
this account if you see malicious users approach.
Container(s) created by one user will not be accessible by other users.
To register a new user:
1
Start the program (see Starting ViPNet SafeDisk on page 28).
Note: If ViPNet SafeDisk is running already, exit the program to close the current user's
session (see Finishing the Work with ViPNet SafeDisk on page 29).
2
In the Enter Password window, click the create password of a new user link.
ViPNet SafeDisk 3.3. User's Guide
| 116
Figure 72: The Enter password window
The ViPNet SafeDisk User Password window (see figure on page 35) will be shown.
3
In the Password of SafeDisk User window, choose User defined or Random. See Setting
a User Password (on page 37) for more information on how to setup a new password for a
new user.
ViPNet SafeDisk 3.3. User's Guide
| 117
Sharing Your Containers
ViPNet SafeDisk allows you to share your containers between several users, thus leveraging
team work with confidential information stored in these containers.
You can share your containers in the following two ways:
1
Provide access to your container for one or more users on the same or different computers
(see Providing Access to Your Container for One or More Users on the Same or
Different Computer on page 120). Using this way you give an exclusive access to your
container to one or more users by giving them a backup copy of container keys (if you and
users you are giving your container to are registered on the same computer) or by giving
them a backup copy of container keys and a container file itself (if these users are working
on different computers). However, using this way, the concurrent access to protected
information stored in your container (s) for all users will be impossible. In addition, even if
you place your container file on a network drive and share it, two or more users will not be
able to use this shared container simultaneously.
2
Share your container on a network (see Sharing Your Containers on a Network on page
120). Using this way you share on a network not a container file itself, but the Windows
disk representing this container when it is connected in your ViPNet SafeDisk session.
This gives you an unprecedented control over who will have access to your sensitive
information and when.
The first way is ideal in the situation, when you are on vacation and another user registered on
your computer is asked to finish your tasks. In this case you should give this user a backup copy
of your container key. This user should launch ViPNet SafeDisk using his or her password,
import the appropriate container using the corresponding backup copy of container keys and
complete all assigned tasks. If this user has no access to your computer you should give him or
her a backup copy of container keys and a container file itself.
The second way is perfect if you want team collaboration on some of protected documents.
Suppose you created a project vision. Now you and your team should brainstorm your project
vision and improve it. To do this, you connect the container with this project vision and share a
Windows disk representing this container between a required number of users.
In case you share your containers in the second way, you should be informed about the
possibilities and limitations concerning sharing your containers (see Container Access Security
on page 119).
ViPNet SafeDisk 3.3. User's Guide
| 118
Note: These limitations are applied only to the second way of sharing containers.
Container Access Security
You can organize container access security:

depending on the file system in which the container has been formatted;

depending on the current operating system.
The dependence of access control to containers is illustrated by the table below.
Table 5. Container Access Security
Your operating
system
Container file system
NTFS
Microsoft Windows
XP SP3 (32
bits)/Server 2003
(32/64 bits)
FAT / FAT32
If you have selected the Exclusive access check box when connecting the
container, the permissions assigned to the container disk will block access to
this container for everybody except for you (the user who has connected this
container). The access will be blocked regardless of the permissions assigned
to the container disk in the operating system. In addition, you will not be able
to configure network access to this disk. On the one hand, it will highly
increase the protection when several users work on the same computer.
However, on the other hand, the possibility for several users to work with the
same container simultaneously will be limited.
If you have not selected the Exclusive access check box when connecting the
container, the access will be granted according to permissions described
below for the operating systems Vista SP2 (32/64 bits)/Server 2008 (32/64
bits)/Windows 7 (32/64 bits).
Vista SP2 (32/64
bits)/Server 2008
(32/64 bits)/Windows
7 (32/64 bits)
When you connect a container, the
permission will be configured so that only
you (the user who has connected the
container in the ViPNet SafeDisk
program) could have full access to the
container disk.
Full access of all users to
containers.
When you share the container in the
network, by means of the operating system
you can block or allow other user to access
the container disk.
ViPNet SafeDisk 3.3. User's Guide
| 119
Providing Access to Your Container for One or More Users
on the Same or Different Computer
To provide access to a container for other users:
1
If a backup copy of container keys has not been created in advance, create it now (see
Creating a Backup Copy of Container Keys on page 69).
2
Give the backup copy of container keys file (*.sde) along with the password you used to
create this backup copy to the user you want to provide access for.
3
If you are going to provide access for a user, who is not registered on your computer, you
should give this user a container file (*.sdc) as well.
Warning: If you let some other users use your container keys backup copy to get
access to the container on your computer, they will not be able to access your container
after updating (see Updating Container Keys on page 86). To continue working with
your container, import it using the container keys backup copy.
If you are a receiving party:
1
Start ViPNet SafeDisk and type the password.
2
On the Container menu, click Import. The Import Container wizard will be displayed.
3
Import a container using a backup copy of container keys.
When importing is complete, both users will have access to the container. By sharing the
backup copy of container keys, you can provide several users with access to the same container.
However, only one user at a time will be able to work with the container.
Sharing Your Containers on a Network
To allow different users to work simultaneously or by turn with the same protected information
you should share the Windows disk representing a ViPNet SafeDisk container. This allows you
to share sensitive information stored in ViPNet SafeDisk container with users who have no
ViPNet SafeDisk installed. This also allows you and your colleagues to work simultaneously
with the protected information stored on your shared container.
Warning: Think carefully before giving permission for shared use. Others do not need
to install ViPNet SafeDisk to work with protected information stored in the shared
container.
ViPNet SafeDisk 3.3. User's Guide
| 120
Note: When you connect a container in Windows Vista or later only you (the user who
has connected the container) are allowed to work with files stored in this container.
Some programs require administrator rights. Thus, if your user account does not have
administrator rights, you will not be able to start such programs.
In this case, we recommend you to launch executable files as an administrator or to
grant administrator rights for the user who connects the container.
To allow different users to work simultaneously with the same protected information:
1
In the main ViPNet SafeDisk window, select the container you want to share.
2
Connect the chosen container, if disconnected (see Connecting an Existing Container on
page 75).
3
Open your computer folder (from the desktop or the Start menu), right-click the disk
which corresponds to the connected container and select Share. The Local Disk
Properties dialog box will be displayed.
Figure 73: Sharing a container
4
In Windows Vista/Server 2008/Windows 7:
o
On the Sharing tab, click Advanced Sharing.
ViPNet SafeDisk 3.3. User's Guide
| 121
o
In the Advanced Sharing window, select the Share this folder check box. Set the
maximum number of simultaneous users of this container. You can also change share
permissions (the Permissions button) and offline settings (the Caching button), if
necessary. For more information about this, see Windows Help and How-to.
Figure 74: Advanced sharing
In Windows XP/Server 2003:
ViPNet SafeDisk 3.3. User's Guide
| 122
o
On the Sharing tab, click Share this folder. Configure how your shared disk will be
displayed in Windows explorer and how many users will be allowed to use this share
simultaneously. You can also change share permissions (the Permissions button) and
offline settings (the Caching button), if necessary. For more information about this,
see Windows Help and How-to.
Figure 75: Advanced sharing
Tip: If you do not see the Share this folder option, make sure that the Use simple file
sharing (recommended) check box is disabled.
5
Click Apply, then OK.
Now your container functions as a shared folder. When it is connected, other users can work
with your protected information as they open the network folder you have created. Container
will be constantly accessible if the computer where the network you have created is located is
reachable. When you and other users work by turn on the same computer, use the Switch user
option. This option allows to switch user account without exiting the operating system and
breaking access to the network folder.
ViPNet SafeDisk 3.3. User's Guide
| 123
To deny access to a shared container, just disconnect it (see Stopping Containers Sharing on
page 124).
You can also disconnect the container in ViPNet SafeDisk (see Disconnecting a Container on
page 81). To share the container again, connect it and specify the same shared disk for this
container as previously.
Warning: After the system restart, you will need to configure the container sharing
again.
Stopping Containers Sharing
To stop sharing a container:
1
In the Advanced Sharing window (see figure on page 122), clear the Share this folder
check box.
2
Click Apply, then OK.
Warning: Upon restarting you computer, you will need to configure container sharing
anew.
ViPNet SafeDisk 3.3. User's Guide
| 124
Protecting Information Stored on a
Server
You can install ViPNet SafeDisk on your network server (s). This allows you to:

enable protection for your corporate information stored on your server;

enable concurrent access to the protected corporate information stored on the server;

not to install ViPNet SafeDisk on every user’s working place thus drastically reducing the
cost of ownership.
To protect your corporate information, on network server (s):
1
Install ViPNet SafeDisk.
2
Consider Checklist: Protecting Your Information (on page 59).
3
Create one or several containers.
4
Connect these containers and save data you want to be available to other users to the
connected container (s).
5
Using standard Windows tools, share the disk corresponding to the connected container
(which contains protected information) (see Sharing Your Containers on a Network on
page 120). Your staff will be able to work as usual.
6
To deny access to all users, disconnect the container (see Stopping Containers Sharing on
page 124).
ViPNet SafeDisk operation on network server (s) does not differ from ViPNet SafeDisk
operation on users’ workstations. Using ViPNet SafeDisk installed on you network server (s)
you always can:

Create a backup copy (see Creating a Backup Copy of Container Keys on page 69) of
your protected corporate information.

Securely transfer your information between computers. It is especially important to protect
your corporate information when sending a container over an unprotected network or with
a courier using a removable media or a laptop. Since information is encrypted, it will be
ViPNet SafeDisk 3.3. User's Guide
| 125
impossible to gain access to it, if the laptop or the removable media are compromised
and/or stolen.

Immediately deny shared access to corporate information by using the Danger mode (see
Immediate Denial of Access to Protected Information. Danger Mode on page 131).

Immediately destroy corporate information in cases of extreme danger using the Extreme
Danger mode (see Destroying Confidential Information. Extreme Danger Mode on page
134).
ViPNet SafeDisk 3.3. User's Guide
| 126
Transferring Confidential Information
with a Courier or via Network
When working with corporate information, it may be necessary to transfer confidential data
from one office to another. If your laptop or removable media are lost or stolen, you need to
avoid a leak. Similarly, a hacker can intercept your corporate sensitive information when it is
being transferred over unprotected network protocols, for example, over FTP.
ViPNet SafeDisk allows you to protect your corporate information during transferring and
prevent data from being lost and /or compromised.
To transfer confidential information with a courier or via network:
1
2
Prepare your confidential information for transferring. To do this, either:
o
make a container export file (see Exporting a Container on page 95);
o
make a backup copy of container keys (see Creating a Backup Copy of Container
Keys on page 69) and copy it along with the container file to the same folder.
Send prepared data via courier or via network.
For more information, see Exporting and Importing Protected Information (on page 92).
ViPNet SafeDisk 3.3. User's Guide
| 127
9
Working in Potentially Insecure
Conditions
Checklist: Preparing to Work in Insecure Environment
129
Working under Malicious Users' Control
130
Immediate Denial of Access to Protected Information. Danger Mode
131
Destroying Confidential Information. Extreme Danger Mode
134
Key Combinations for the Danger and Extreme Danger Modes
137
ViPNet SafeDisk 3.3. User's Guide
| 128
Checklist: Preparing to Work in
Insecure Environment
To protect your confidential data from falling into wrong hands, you should successfully
complete all the tasks in the following check list.
Task
Reference
Register a dummy user
Preparing for Work under Malicious
Users' Control (on page 130)
Remember a password of your dummy user
Log on to SafeDisk as a dummy user, create fake
containers and populate these containers with fake
data
Working while under Malicious Users'
Control (on page 130)
Enable Danger mode
Immediate Denial of Access to
Protected Information. Danger Mode
(on page 131)
Enable Extreme Danger mode
Destroying Confidential Information.
Extreme Danger Mode (on page 134)
Remember key combinations allowing you to
quickly disconnect and/or destroy all containers
Key Combinations for the Danger and
Extreme Danger Modes (on page 137)
Tip: We recommend you to print this checklist and select the check boxes as you
advance through the steps outlined in this checklist.
ViPNet SafeDisk 3.3. User's Guide
| 129
Working under Malicious Users' Control
ViPNet SafeDisk allows you to protect your confidential information even when you are under
malicious users’ control.
Preparing for Work under Malicious Users' Control
1
Register a new user (see Controlling Access to Protected Information. Registering a New
User on page 116). This can be used as a dummy under malicious users’ control.
2
As a dummy user, create a container (see Creating a Container on page 60).
3
Connect this new container (see Connecting a Container on page 72).
4
Save information which realistically imitates the original into this container.
5
Remember the password of the dummy user.
Working while under Malicious Users' Control
When you are forced to work under malicious users’ control:
1
Start ViPNet SafeDisk (see Starting ViPNet SafeDisk on page 28).
2
Type the password of the dummy user.
3
Connect the container (see Connecting an Existing Container on page 75) with dummy
information.
Malicious users will not be able to find out whether the information stored in the
connected container is real or fake (until they actually delve into the contents of this
information).
ViPNet SafeDisk 3.3. User's Guide
| 130
Immediate Denial of Access to
Protected Information. Danger Mode
If there is a potential danger from outsiders and/or malicious users approaching your computer:
1
In advance, in the main window, either:
o
on the toolbar, click Danger
, or
o
on the Security menu, select Activate Danger Mode, or
o
on the SafeDisk menu, select Options, in the navigation pane select Danger mode, in
the view pane, select the Danger mode check box and click Apply.
Figure 76: Configuring the Danger mode options
The Danger mode will be enabled.
Tip: If you do not want to be warned about enabling the Danger mode, either, in the
Danger Mode pane, clear the Warn about activating Danger mode check box and
click Apply, or, in the Activating Danger Mode window, select the Do not show this
window again check box.
ViPNet SafeDisk 3.3. User's Guide
| 131
2
When outsiders approach your computer, do one of the following:
o
on the toolbar, click Disconnect All
,
o
on the Security menu, select Immediately disconnect containers, or
o
press the hot key combination, Ctrl+Alt+D (by default).
Tip: To change the hot key combination, in the Danger Mode pane (see figure on page
131), in the Immediately disconnect all containers by the following shortcut key
box, set the combination of your choice by pressing the corresponding keys. Click
Apply.
All containers will be disconnected and access to confidential information stored in them
will be denied. Windows disks corresponding to the connected containers will not be
displayed in your computer folder. The ViPNet SafeDisk icon will disappear from the
notification area. There would be no evidence left that you have worked with confidential
information.
If, within the specified time period (by default 60 seconds), ViPNet SafeDisk has failed to
disconnect all the containers, then:

all connected containers will be forced to disconnect,

all applications started by you will be closed,

you will be logged off from the system.
To change this interval:
1
On the SafeDisk menu, select Options.
2
In the navigation pane, select Danger Mode.
3
In the Danger Mode pane, in the Whether SafeDisk cannot disconnect one of its
containers, restart Windows in box, type or select the necessary time interval (in
seconds).
4
Click Apply.
ViPNet SafeDisk 3.3. User's Guide
| 132
To disable the Danger mode, do one of the following:

on the toolbar, click Danger

on the Security menu, deselect Activate Danger Mode,

in the Options window, in the Danger Mode pane (see figure on page 131), clear the
Danger mode check box and click Apply.
,
ViPNet SafeDisk 3.3. User's Guide
| 133
Destroying Confidential Information.
Extreme Danger Mode
The Extreme Danger mode allows you to destroy all confidential information stored in your
containers quickly. This may be useful if suspect outsiders or malicious users are approaching
and you see no other means of help.
Warning: With the Extreme Danger mode you can destroy all your containers beyond
recovery. Use it wisely.
When you destroy all containers while in the Extreme Danger mode, all container keys
for all users will be deleted and all the data stored in these containers will be lost.
To destroy your confidential information quickly:
1
In advance, in the main window, either:
o
on the toolbar, click Extreme Danger
;
o
on the Security menu, select Activate Extreme Danger Mode;
ViPNet SafeDisk 3.3. User's Guide
| 134
o
on the SafeDisk menu, select Options, in the navigation pane, select Extreme Danger
Mode, then, in the view pane, select the Extreme Danger mode check box and click
Apply.
Figure 77: Configuring settings for Extreme Danger mode
Tip: If you do not want to be warned about enabling the Extreme Danger mode, in the
Options dialog box, in the Extreme Danger Mode pane, clear the Warn about
activating Extreme Danger mode check box and click Apply or, in the Activating
Extreme Danger Mode window, select the Do not show this window again check
box.
2
To destroy your protected information immediately, on the toolbar, click Destruct All
Containers
times.
three times or press the Ctrl+Shift+Alt+D hot key combination three
Tip: To change the hot key combination, in the Options dialog box, in the Extreme
Danger Mode pane (see figure on page 135), in the Destruct all containers by
pressing the following shortcut key three times in a row box, set the combination of
your choice by pressing the corresponding keys. Click Apply.
ViPNet SafeDisk 3.3. User's Guide
| 135
All the containers, containers’ keys and configuration backup copies for the current user will be
destroyed. The main window will disappear from your screen and the icon
will disappear
from the notification area. If ViPNet SafeDisk has failed to disconnect all the containers, then:

all connected containers will be forced to disconnect,

all applications started by you will be closed,

you will be logged off from the system.
At the next program startup, the list of containers will be empty.
To increase the security of your work, you can hide the Extreme Danger mode button from the
ViPNet SafeDisk toolbar. To do this:
1
In the Options dialog box, in the Extreme Danger Mode pane (see figure on page 135),
clear the Show Extreme Danger mode buttons on the toolbar check box.
2
Click Apply.
You can make the Destruct All Containers
button semi-transparent above all windows.
This will simplify your access to the destruction option when necessary:
1
In the Options dialog box, in the Extreme Danger mode pane (see figure on page 135),
select the Show containers destruction button always on top check box.
2
Click Apply.
To disable the Extreme Danger mode, do one of the following:

on the toolbar, click Extreme Danger

on the Security menu, select Activate Extreme Danger Mode,

in the Options dialog box, in the Extreme Danger Mode pane (see figure on page 135),
clear the Extreme Danger mode check box and click Apply.
,
ViPNet SafeDisk 3.3. User's Guide
| 136
Key Combinations for the Danger and
Extreme Danger Modes
Ctrl+Alt+D — you should press this key combination to disconnect all your containers at once
(the Danger mode should be enabled).
Ctrl+Shift+Alt+D — you should press this key combination three times in a row to destroy all
your containers (the Extreme danger mode should have been enabled beforehand).
ViPNet SafeDisk 3.3. User's Guide
| 137
10
Removing Traces of Secure Data
on Your Computer
Why Do You Need It?
139
Cleaning Secure Data. Common Workflow
141
Checklist: Cleaning Secure Data
142
Removing Traces of Windows Activities
143
Removing Traces of Internet Explorer Activities
148
Full Cleanup
151
Full Cleanup Using the Command Line
154
ViPNet SafeDisk 3.3. User's Guide
| 138
Why Do You Need It?
The Windows operation system provides restoring deleted files even if you have deleted data by
mistake, if you have emptied the recycle bin, deleted files by pressing Shift+Delete, formatted
your hard disk, and even if your hard disk failed and you are unable to read any information on
it.
When you delete files by standard tools, the operation system just marks them to be deleted,
changing their names, and later new files are re-written on their place.
Formatting of a hard disk leaves its backup copy. If a hard disk fails, there are physical methods
of information recovery.
Thus, you can’t securely remove confidential information without the help of additional
facilities. To provide secure cleaning of unprotected data, the Clean.exe utility is included in
ViPNet SafeDisk distribution kit.
Note: The data protected by ViPNet SafeDisk is always cleaned securely.
You need to securely clean data in the following situations:

You used a key file as a protection type for your container. Now you deleted the container.
Your key file contains confidential information, thus the very existence of this file should
be concealed.

You worked with a document containing confidential information in MS Word. Even if
you store this file in one of the ViPNet SafeDisk containers, your Windows operating
system will store information what file, when and from where has been opened. To
leverage security, you should wipe out these tracks.

You have committed an on-line transaction involving your personal and financial data.
Traces of this transaction have been stored in you cookies and temporary internet files. To
protect yourself, you should purge this data beyond recovery.

You have bought a new computer and decided to sell your old one. You have formatted
your old hard disk using standard Windows tools in attempt to remove all traces of
confidential information you have been working on. However, still there are techniques
allowing malicious users to retrieve data from your formatted hard drive. To be sure that
ViPNet SafeDisk 3.3. User's Guide
| 139
no one will ever get access to your confidential information, use ViPNet SafeDisk free
space cleaning feature.
ViPNet SafeDisk 3.3. User's Guide
| 140
Cleaning Secure Data.
Common Workflow
If you worked with documents, copied a text, moved files from one folder to another, deleted or
removed them by standard tools, you need to clean all the remaining information securely from
all possible locations.
In ViPNet SafeDisk, you can securely remove traces of your activities by cleaning. To start,
define the components to be cleaned. You can clean the traces of Windows and Internet
Explorer activities.
You can clean the traces of the following Windows activities:

recent documents,

temporary files,

recycle bin,

free space on the disks where files have been created before being put into the container.
For more information about the above mentioned operations, see Removing Traces of Windows
Activities (on page 143).
You can clean the traces of the following Internet Explorer activities:

web history,

temporary internet files

cookies.
For more information about the above mentioned operations, see Removing Traces of Internet
Explorer Activities (on page 148).
ViPNet SafeDisk also allows you to remove all traces of confidential information at once with
the Full Cleanup option (see Full Cleanup on page 151).
If you are a power user or a programmer, and want to use a command line to clean the traces of
confidential information, use the Clean.exe utility.
ViPNet SafeDisk 3.3. User's Guide
| 141
Checklist: Cleaning Secure Data
To successfully protect your sensitive information and to be sure that you have removed all
traces of your confidential activities, you should successfully complete all the tasks in the
following checklist.
Task
Reference
Regularly clean recent documents
Removing Traces of Recently Opened
Documents (on page 143)
Regularly clean temporary files
Deleting Temporary Files (on page
143)
Regularly clean the recycle bin
Cleaning the Recycle Bin (on page
144)
Regularly clean traces of moved or deleted
unprotected files
Deleting Unprotected Files Securely
(on page 144)
Regularly clean free space on your hard disks
Securely Cleaning Free Disk Space (on
page 145)
Regularly clean your browsing history
Deleting Your Browsing History (on
page 148)
Regularly clean temporary internet files
Deleting Temporary Internet Files (on
page 148)
Regularly clean cookies
Deleting Cookies (on page 149)
Tip: We recommend you to print this checklist and select the check boxes as you
advance through the steps outlined in this checklist.
ViPNet SafeDisk 3.3. User's Guide
| 142
Removing Traces of Windows
Activities
Removing Traces of Recently Opened Documents
Windows allows you to see your recently opened documents quickly using links to them from
the Recent directory, which usually can be reached from the Start menu. Malicious users can
find out about the existence of confidential information by those links. Clean the Recent
directory to provide secure storage of confidential information.
ViPNet SafeDisk securely deletes links to your recent documents from the following locations:

C:\Users\your_user_name\AppData\Roaming\Microsoft\Windows\Recent
(Windows
Vista or higher).

C:\Users\your_user_name\AppData\Roaming\Microsoft\Office\Recent
(Windows
Vista or higher).

C:\Documents and Settings\your_user_name\Recent
(Windows XP).
To clear recent documents:
1
In ViPNet SafeDisk main window, on the Cleanup menu, click Windows, then click
Recent Documents.
2
As a result of your actions all links to your recently opened documents will be deleted.
Tip: You can make the Recent folder be cleaned securely and automatically each
session (see Configuring ViPNet SafeDisk on page 90).
Deleting Temporary Files
Many Windows applications create temporary files when working with files. These temporary
files may contain a full backup copy of all data stored in original files as well as additional and
service information. As a rule, these temporary files are deleted by applications themselves
when they finish working with the original files. However, sometimes these temporary files are
ViPNet SafeDisk 3.3. User's Guide
| 143
left by applications and are not deleted. Such “forgotten” temporary files with your confidential
information may impose a serious threat to security of your sensitive data. That is why it is
extremely necessary to securely delete all temporary files left by applications when working
with confidential information.
ViPNet SafeDisk securely deletes temporary files from the following locations:

C:\WINDOWS\Temp

C:\Documents and Settings\user_name\Local Settings\Temp

C:\Users\your_user_name\AppData\Local\Temp
(or from another folder used for storing temporary files in your system).
(Windows XP).
(Windows Vista or higher).
To clean temporary files:
1
In ViPNet SafeDisk main window, on the Cleanup menu, click Windows, then click
Temporary Files.
2
As a result of your actions all temporary files which were left by applications will be
deleted beyond recovery.
Cleaning the Recycle Bin
Files deleted by standard tools are moved to the recycle bin and can be easily restored by the
Restore option. To prevent the deleted files to be restored from the recycle bin, clean the recycle
bin securely.
To clean the recycle bin:
1
In ViPNet SafeDisk main window, on the Cleanup menu, click Windows, then click
Recycle Bin.
2
As a result of your actions all contents will be securely deleted from the recycle bin.
Deleting Unprotected Files Securely
Before you installed ViPNet SafeDisk, your confidential files and documents had been
unprotected. This usual way, as you already know, did not provide appropriate security for your
confidential data. Even if you have deleted the file from your hard disk and emptied the recycle
bin, it could be easily restored using various software or hardware techniques.
When you installed ViPNet SafeDisk and copied or moved all your confidential files into
protected containers, these files (and information stored within) can still be easily restored from
ViPNet SafeDisk 3.3. User's Guide
| 144
your hard drive in case of need. To eliminate this security threat, you should securely delete
these files from your hard disk, after you copy or move them to protected containers.
To delete unprotected files securely, either:

Delete the files themselves (see Deleting Files Securely on page 145).

If you have already deleted the files using standard Windows tools, use free disk space
cleaning feature of ViPNet SafeDisk (see Securely Cleaning Free Disk Space on page
145).
Deleting Files Securely
To delete files:
1
Select the files in the unprotected folder.
2
Right-click them and, on the context menu, select Secure delete. (For Windows 7 and
Windows versions prior to Vista you can also click Secure delete in the File menu of the
Explorer window.)
3
Confirm deleting the files.
Securely Cleaning Free Disk Space
To use free disk space cleaning feature:
1
In ViPNet SafeDisk main window, on the Cleanup menu, select Windows, and then click
Free Space on Disks. The Cleanup wizard will be started.
2
On the Free disk space page, leave the check boxes near the disks you need to clean
selected and click Next.
ViPNet SafeDisk 3.3. User's Guide
| 145
Figure 78: Selecting disks to clean free space on
3
Wait till the end of the cleaning process.
4
On the Cleanup Completed page, click Finish.
Choosing Default Disks to Clean Free Space On
To pre-set the default disks to clean free space on:
1
In ViPNet SafeDisk main window, on the SafeDisk menu, click Options.
2
In the Options dialog box, in the navigation pane, click Clean Free Space on Disks.
ViPNet SafeDisk 3.3. User's Guide
| 146
Figure 79: Configuring options of free disk space cleanup
3
In the Clean free space on the following disks list, select the check boxes for the disks
you need to clean free space on by default.
4
Click Apply, then OK.
ViPNet SafeDisk 3.3. User's Guide
| 147
Removing Traces of Internet Explorer
Activities
Warning: Secure deleting of web history, Internet cache and cookies works only in
Internet Explorer browser. Other browsers will be supported only in the next ViPNet
SafeDisk versions.
Deleting Your Browsing History
As you browse the web, Internet Explorer stores information about the websites you visit (by
default, addresses are stored there up to 3 weeks). Usually, it is helpful to have this information
stored on your computer because it can improve your web browsing speed. But if you do not
want this personal information to be left behind, clean it:
You internet browser history is located in the following folders:

C:\Documents and Settings\your_user_name\Local Settings\History
(Windows
XP);

C:\Users\your_user_name\AppData\Local\Microsoft\Windows\History
(Windows
Vista or higher).
To clean your Internet browsing history:
1
In the ViPNet SafeDisk main window, on the Cleanup menu, click Internet Explorer,
then click History.
2
As a result all information about web sites you have recently visited will be securely
deleted.
Deleting Temporary Internet Files
Internet Explorer stores in cache all the data received from the Internet when working with
different web pages. These data can be really useful if you are using slow modem or DSL
connections for it greatly increases your browsing speed. However, if you do not want this
personal information to be left behind, clean it:
ViPNet SafeDisk 3.3. User's Guide
| 148
Internet Explorer stores its temporary files in the following folder:

C:\Documents and Settings\your_user_name\Local Settings\Temporary Internet
Files

(Windows XP).
C:\Users\your_user_name\AppData\Local\Microsoft\Windows\Temporary Internet
Files
(Windows Vista or higher).
To clean your temporary internet files:
1
In the ViPNet SafeDisk main window, on the Cleanup menu, click Internet Explorer,
then click Temporary Internet Files.
2
As a result all your temporary internet files will be deleted beyond recovery.
Deleting Cookies
Cookies are small text files a web browser stores on a computer. These files may store the
contents of your shopping baskets from Internet shops, logins and passwords used on websites
and other confidential information that can be concealed if you delete cookies from Internet
Explorer.
Warning: To successfully clean cookies all your Internet Explorer sessions should be
closed.
Internet Explorer cookies are stored in the following folders:


Windows XP:
o
C:\Documents and Settings\your_user_name\Cookies.
o
C:\Documents and Settings\your_user_name\Local Settings\Temporary
Internet Files.
Windows Vista or later:
o
C:\Users\your_user_name\AppData\Roaming\Microsoft\Windows\Cookies.
o
C:\Users\your_user_name\AppData\Local\Microsoft\Windows\Temporary
Internet Files.
To clean your Internet Explorer cookies:
1
In the ViPNet SafeDisk main window, on the Cleanup menu, click Internet Explorer,
then click Cookies.
ViPNet SafeDisk 3.3. User's Guide
| 149
2
As a result of your actions all your cookies will be deleted beyond recovery. Your
confidential information will not be left behind.
ViPNet SafeDisk 3.3. User's Guide
| 150
Full Cleanup
You may need to clean all or several types of traces of confidential information at once. To do
this:
1
In ViPNet SafeDisk main window, on the Cleanup menu, click Full Cleanup. The
Cleanup wizard will be displayed.
2
In the Cleanup wizard, on the Full cleanup page, in the Clean list, select the check boxes
of the components you need to clean.
Upon finishing, click Next.
Figure 80: Starting full cleanup
3
On the Free disk space page, select the Clean free disk space check box, if you also want
to clean free space on your hard disks from the traces of deleted or moved confidential
files and documents.
In the Select drives to be cleaned list, select the check boxes of the disks you need to
clean free space on. Click Next.
ViPNet SafeDisk 3.3. User's Guide
| 151
Figure 81: Cleaning free disk space options
4
On the Cleanup Completed page, you can see what types of confidential information
traces have been cleaned at your last launch of full cleanup.
Figure 82: Completing the cleaning process
Click Finish, to exit the wizard.
Configuring Full Cleanup
Full cleanup options allow you to select the components that will be cleaned by default when
you run full cleanup and to configure automatic cleanup.
ViPNet SafeDisk 3.3. User's Guide
| 152
To specify the information for deletion during the cleanup, do the following:
1
On the SafeDisk menu, select Options. The Options dialog box will be displayed.
2
In the navigation pane, click Full Clean.
Figure 83: Configuring full cleanup options
3
In the Full Clean pane, in the Will be cleaned during full cleanup list, select the check
boxes for the components you want to be cleaned by default.
4
Click Apply, then OK.
To configure full cleanup to run automatically:
1
In the Options dialog box, in the Full Clean pane, in the Automatically run full cleanup
list, select the required option: After start of SafeDisk, While shutting down SafeDisk
(on exiting ViPNet SafeDisk), While shutting down Windows (on exiting Windows),
Every day, Every 3 days, Every week, Every month or Do not clean.
2
Click Apply, then OK.
ViPNet SafeDisk 3.3. User's Guide
| 153
Full Cleanup Using the Command Line
ViPNet SafeDisk allows you to use command line arguments to start various cleaning processes.
This can be useful in the following situations:

You want to securely clean files of the specific type. For example, you want to get rid of
any traces of your *.doc files for this was the very files which contain confidential
information.

You want to securely clean a specific folder on your hard disk.

You have written an automation script (*.bat file) and want to use cleaning features of
ViPNet SafeDisk in your script. Perhaps, you want to run ViPNet SafeDisk cleaning
operations according to a schedule without any subsequent user interaction or to perform
secure cleaning every time before you shut down your computer.

You have written a plug-in for MS Word allowing you to securely work with some data.
Business requirements of your plug-in require you to securely delete all traces that you
have been working with confidential documents in MS Word.

You want to execute ViPNet SafeDisk cleaning commands without starting ViPNet
SafeDisk graphical user interface. Perhaps, you do not want to draw attention of your users
from more important activities.
To run secure cleaning commands from the command-line:
1
Run the command line.
2
Enter the path to the clean.exe utility. By default, the path is: C:\Program
Files\InfoTeCS\ViPNet SafeDisk\.
3
In the command prompt, type Clean.exe, space, forward slash (/) and give necessary
arguments. For the arguments and their impact on the Clean.exe operations, see the table
below.
ViPNet SafeDisk 3.3. User's Guide
| 154
Table 6. Secure cleaning commands
Command in the main menu
(graphical user interface)
Command in the
command line (with
arguments)
Result
Free Space
Clean.exe /f <disk
name's letter>
Free space on the defined disk is cleaned. To
clean free space on a disk, you need to have
the privilege to write to the root folder of
this disk.
Temporary Files
Clean.exe /t
Temporary files are deleted securely.
Recent Files
Clean.exe /d
Files from the Recent folder (recently used
documents) are deleted securely.
Recycle Bin
Clean.exe /r
The recycle bin is cleaned securely.
Clean.exe <mask>
The files with the defined mask are deleted
from the defined (by default, from the
current) folder. Defining a mask, please
note:
Traces of Windows activities
? — stands for 1 character.
* — stands for several characters.
For example, if you enter the *.doc mask, all
files with .doc extension will be deleted.
Clean.exe <folder
name>
The folder content is deleted.
History
Clean.exe /h
IE browsing history is cleaned securely.
Temporary Internet Files
Clean.exe /i
IE cache is cleaned securely.
Cookies
Clean.exe /c
IE Cookies is deleted securely
Traces of Internet Explorer
activities
Tip: You can launch the clean.exe utility with some parameters. For example,
Clean.exe /c /h /i /t /r /d /fc c:\folder1\*.* c:\folder2.
ViPNet SafeDisk 3.3. User's Guide
| 155
11
Troubleshooting
Viewing the Events Log
157
Other Common Issues
158
ViPNet SafeDisk 3.3. User's Guide
| 156
Viewing the Events Log
To view the ViPNet SafeDisk events log:
1
Open the program installation folder. By default, the path is:
o
C:\Users\User\AppData\Roaming\InfoTeCS\SafeDisk
in the operating systems
Windows Vista (and later) and Windows Server 2008;
o
C:\Documents and Settings\User\Application Data\InfoTeCS\SafeDisk\
in
the operating systems Windows XP and Windows Server 2003.
2
Open the text document SDEvents.log. You can see information on the following events:
o
logon to the system by User,
o
logoff from the system by User,
o
Danger mode,
o
Extreme Danger mode,
o
all actions with every container (container name is also specified) (creating new
container, mounting container, dismounting container, removing container, importing
container, exporting container, changing properties of the container).
For all these events the following data is recorded:

date and time of the event,

event result: failed or success.
ViPNet SafeDisk 3.3. User's Guide
| 157
Other Common Issues
Container Not Available
If, when connecting a new container, a message will be displayed, saying it is unavailable:
1
Open My Computer.
2
Press F5 to refresh it.
Afterwards, new drives will be visible.
To start working with a new container, format it.
Formatting Disks Impossible
If ViPNet SafeDisk is installed on your computer with Windows OS and you do not possess
administrator rights, formatting container disks is impossible. To enable this function, either
obtain administrator rights on your computer, at least temporarily, or ask your ViPNet
administrator to create a container for you and import it to your computer.
Container File Not Found
If you start ViPNet SafeDisk and a previously created container is not found, in the main
program window, the container will have the icon. If you cannot connect your container in
ViPNet SafeDisk:

Check if the container name has been changed.

Check if the path to the container has been changed.

If the container is located on a remote network disk, check connection.

If the container is stored on an external device, check that the device is connected.
If you try to connect the container which is not found, the Container not found window will be
shown. To get access to the information stored in the container which is not found, specify the
new location of the container file.
ViPNet SafeDisk 3.3. User's Guide
| 158
Figure 84: Container file is not found
Connection to a Container Lost
If the connection to a container connected as a network drive or on a removable media was lost:
1
Disconnect the container (see Disconnecting a Container on page 81).
2
Restore the connection (or wait till it is restored).
3
Connect the container again (see Connecting an Existing Container on page 75).
Cannot Connect to a Container
If you cannot connect to a container, either:

Check if other users are connected to your container (this can happen if you have placed
your container file on the shared remote drive)
Remember, only one person at a time can work with a container file

See Container File Not Found (on page 158).
Compress or Encrypt Attribute Is Set for the Container File
In the current ViPNet SafeDisk version, you cannot use a file with the compress or encrypt
attribute as a container. If you try to connect such a container, an error message will be
displayed informing you that the container cannot be connected.
Figure 85: Compressed or encrypted attribute is enabled
ViPNet SafeDisk 3.3. User's Guide
| 159
The compress or encrypt attribute can be set automatically for the container file when it is
created. This happens in case the compress attribute is set for the disk, on which the container
file is created, as well as for all the folders and files on the disk.
To disable the compress and encrypt attributes:
1
Right-click the container and, on the context menu, select Properties.
2
In the container properties window, on the General tab, click Advanced.
3
In the Advanced Attributes window, under Compress and Encrypt attributes, clear the
corresponding check boxes.
Unable to Create a Container with the External Device
Protection Type
If, when you create a container with the External device protection type, you are informed that
it is impossible to create a container, do the following:
1
Make sure the connected external device is supported by the ViPNet SafeDisk software.
For the list of supported external devices, see Supported External Storage Devices (on
page 164).
2
Make sure the required drivers or other software are installed on the computer. For the
devices' software requirements, see Supported External Storage Devices (on page 164).
3
Make sure the external device has been initialized correctly. For example, during the
initialization you were informed it would be necessary to change the PIN at the next device
connection, but you had not changed the PIN. In this case, you will not be able to use this
device for storing container protection keys.
4
Delete all the information from the protected memory of the external device. To do this,
initialize the device. For the detailed instruction on how to initialize your external device,
see the documentation shipped together with the device.
5
Try to use another device with a greater volume of the protected memory.
ViPNet SafeDisk 3.3. User's Guide
| 160
A
Version History
This Appendix describes general changes that were made to previous versions of ViPNet
SafeDisk.
Version 3.2.2
This section contains a brief description of changes made to ViPNet SafeDisk 3.2.2 and its new
features.

French localization
A French localization has been released. The user interface, documentation and Help have
been localized.

Improved documentation and Help
Documentation and Help files have been revised, their quality has been improved. The
emphasis has been made on best practices and user scenarios.
Version 3.2.1
This section contains a brief description of changes made to ViPNet SafeDisk 3.2.1 and its new
features.

Specifying an alphanumeric PIN
ViPNet SafeDisk 3.3. User's Guide
| 161
Now, using external devices, you can specify not only the numeric PIN, but also an
alphanumeric PIN.
Version 3.2.0
This section contains a brief description of changes made to ViPNet SafeDisk 3.2.0 and its new
features.

64-bit operating systems support
Now ViPNet SafeDisk is compatible with 64-bit operating systems: Windows XP Pro (64
bit), Windows Vista (64 bit), Windows Server 2008 (64 bit), Windows 7 (32/64 bit).
Version 3.1.1
In version 3.1.1, the program functionality has improved, and some critical bugs of version 3.1.0
have been fixed.
Version 3.1.0
This section contains a brief description of changes made to ViPNet SafeDisk 3.1.0 and its new
features.

Ability to work either with a free edition, or with a registered version of the software
Now you can use either a free edition or a fully-functional version of the software. A free
edition requires no registration, but has some functional restrictions. A fully-functional
version requires registration. A demo version is no longer supported.
A free edition of version 3.1.0 has the following restrictions:
o
maximum number of users — 1;
o
maximum number of containers — 1;
o
maximum container size — 100 MB.
A free edition does not have any time limitations. A registered version is not restricted to
any of the mentioned points.

Securely cleaning your unwanted data using options of the main menu
Previously, you could securely clean unwanted data only by means of the command line.
Now these options are available in the program main window, on the Cleanup menu. To
configure secure cleanup, you can use a special wizard.
ViPNet SafeDisk 3.3. User's Guide
| 162
Figure 86: Options to securely clean your information
You can configure running the secure cleanup automatically for certain events and at
scheduled intervals.

Using ACOS2-8k smart cards as external devices
ACOS2-8k smart cards have been added to the list of supported devices that you can use to
protect your containers. ACOS2-8k smart cards operate via standard PC/SC interface.

Viewing the container formatting process
Now you can receive information on container formatting status, in case this process takes
a long time.
Figure 87: Container formatting process
ViPNet SafeDisk 3.3. User's Guide
| 163
B
Supported External Storage
Devices
The ViPNet software supports different external storage devices to read and securely store your
personal information (passwords, keys, and so on).
Warning: You cannot store personal keys of several users on the same device, except
for signature keys. Before you store keys on a device, make sure that the device is
formatted.
In the table below, you can find the list of devices supported by the ViPNet software. The table
below contains the following information:

The Device Type column contains the list of devices supported by the ViPNet software
that are used to read the keys.

The Key type column contains the types of keys that can be read by the devices listed.

The Requirements column contains an outline of requirements that should be met to use
each key.

The last column contains information about support for the PKCS#11 standard.
Note: PKCS#11 (also known as Cryptoki) is one of the PKCS standards (Public Key
Cryptography Standards — cryptographic standards of public keys) developed by the
ViPNet SafeDisk 3.3. User's Guide
| 164
RSA Laboratories company. The standard defines the API interface independent of the
platform and intended for the work with cryptographic devices of identification and data
storage.
Table 7. External Devices Supported
Device Type
Key Type
Requirements
PKCS#11
support
eToken
Aladdin
eToken PRO (personal
electronic keys, eToken
PRO (Java), eToken
PRO, smart cards
eToken PRO (Java),
eToken PRO by
Aladdin Company)

PKI Client software of the 5.1 version
or later should be installed on the
computer.
Yes

Supported OS: Windows XP SP3 (32
bit), Server 2003 SP2 (32 bit), Vista
SP2 (32/64 bit), Server 2008 (32/64
bit), Windows 7 (32/64 bit), Server
2008 R2.

Note: You can use eToken PRO
SmartCard with any standard PC/SCcompatible USB card reader.

A reader device must be connected to
the computer.

1-Wire Drivers software, version 3.6.2,
ensuring data exchange with the
iButton should be installed on the
computer.

Supported OS: Windows XP SP3 (32
bit), Server 2003 (32 bit), Vista SP2
(32 bit), Server 2008 (32 bit), Windows
7 (32 bit)
Smartcards with
memory of the I2C
(ASE M4) type,
synchro cards with a
2/3 bus and protected
memory meeting the
requirements of the
ISO7816-3 (ASE
MP42) standard.

ASEDrive III PRO-S reader by Athena
company is used to process data on a
smart card.

Drivers of the 2.6 version should be
installed on the computer.

Supported OS: Windows XP SP3 (32
bit), Server 2003 (32 bit), Vista SP2
(32/64 bit).
Siemens smart cards
(CardOS/M4.01a,
CardOS V4.3B,
CardOS V4.2B,
CardOS V4.2B DI,

For the proper work, Siemens CardOS
API V5.0 and later should be installed
on the computer.

Supported OS: Windows XP SP3 (32
bit), Server 2003 EE SP2 (32 bit), Vista
iButton
Smartcard
Athena
Siemens
CardOS
iButton (Dallas)
(iButton electronic keys
of the DS1993,
DS1994, DS1995, and
DS1996 types)
No
No
Yes
ViPNet SafeDisk 3.3. User's Guide
| 165
Device Type
Key Type
CardOS V4.2C,
CardOS V4.4)
Requirements
PKCS#11
support
SP2 (32/64 bit), Server 2008 SP2
(32/64 bit), Windows 7 (32/64 bit).
ViPNet SafeDisk 3.3. User's Guide
| 166
C
Regional Settings
For the English localization to be displayed correctly in the ViPNet software interfaces under
the Microsoft Windows XP/Server 2003/Vista/Server 2008/Windows 7 OS of a localization
other than English, you should install Latin characters support for those programs that do not
support Unicode. We recommend you to configure these parameters before you install the
ViPNet software.
Warning: You will need to do the same settings if an English MUI (Multilanguage
User Interface) is installed. This means that the OS core is not in English, and the
English language has been installed for the interface and help files later. In such a case,
regional settings are not English and require to be changed.
For the Windows XP and Server 2003 OS to support Latin characters:
1
Choose Control Panel.
2
Select Regional and Language Options.
3
In the Regional and Language Options window, click the Advanced tab.
4
In the list, choose English (United States).
5
Select the Apply all settings to the current user account and to the default user profile
check box.
ViPNet SafeDisk 3.3. User's Guide
| 167
Figure 88: Choosing a language for the programs that do not support Unicode in the
Windows XP system
6
Click OK. Probably, you will need to reboot.
For the Windows Vista, Server 2008, and Windows 7 OS to support Latin characters:
1
Choose Control Panel > Clock, Language, and Region > Region and Language.
2
In the Region and Language window, click the Administrative tab.
ViPNet SafeDisk 3.3. User's Guide
| 168
Figure 89: Additional language parameters
3
On the Administrative tab, click Change system locale.
4
In the list, choose English (United States) and click OK.
Figure 90: Choosing system locale
5
On the Administrative tab, click Copy settings.
6
Select the Welcome screen and system accounts check box and click OK.
ViPNet SafeDisk 3.3. User's Guide
| 169
Figure 91: Copying your settings
To avoid problems with encoding in some systems, we recommend you to do the following:
1
In the Region and Language window, on the Formats tab, in the Format list, select
English (United States).
ViPNet SafeDisk 3.3. User's Guide
| 170
Figure 92: Region and language settings
2
In the Region and Language window, on the Location tab, in the Current location list,
select your country.
ViPNet SafeDisk 3.3. User's Guide
| 171
Figure 93: Specifying your current location
ViPNet SafeDisk 3.3. User's Guide
| 172
D
Glossary
B
Backup copy of container keys
A special file holding a copy of all your keys used to protect your container. If your key file
becomes corrupted or you cannot access a container while the container file itself is undamaged,
you can use the backup copy of this container’s key to regain access to this container. You can
also create a backup copy of container keys when giving somebody access to your container
file.
This file has the *.sde extension.
See also: Container file (on page 174).
C
Container
See Container file (on page 174).
Container export file
You create this file when exporting a container. This file includes both a container file and a
corresponding backup copy of this container’s keys.
ViPNet SafeDisk 3.3. User's Guide
| 173
You create this file when you want to create a full backup of all your data stored in your
container and when you want to give another person the possibility to work with your
confidential information.
This file has the *.sdx extension.
See: Backup copy of container keys (on page 173), Container file (on page 174).
Container file
A special file where all your protected data is stored. This file is mounted as another Windows
logical disk in your system. You can work with this disk as you work with other logical disks,
drag and drop files, copy, paste, remove and so on.
This file has an *.sdc extension and is hidden by default. To show this file in Windows
Explorer, enable Show hidden files and folders. This option can be found in the Folder
Options dialog box on the View tab.
D
Danger Mode
A special feature of ViPNet SafeDisk, which allows you to disconnect all containers at once
when you see malicious or unauthorized users approach.
See also: Extreme danger mode (on page 174).
Digital roulette
An integrated ViPNet software component which allows you to launch a random number
generator based on your chance movements.
Dummy user
A special fake user account you should create to simulate working activities if working under
malicious user control. We strongly recommend you to create this account beforehand.
E
Extreme danger mode
A special feature of ViPNet SafeDisk allowing you to destroy all containers when you see
malicious users approach and no one can put you out of the trouble and help you.
See also: Danger mode (on page 174).
ViPNet SafeDisk 3.3. User's Guide
| 174
T
Type of access to a container
This feature allows you to choose the way how your ViPNet SafeDisk container will be
protected. You can choose one the following values: Password (your container will be
protected by the password you use to log on to ViPNet SafeDisk); Key file (your container will
be protected by the special key file); Token (your container will be protected by a token you
insert in a slot).
ViPNet SafeDisk 3.3. User's Guide
| 175
E
Index
B
Backup copy of container keys • 69, 174
Beginning Registration • 44, 53
Buying the Program (Getting a Serial
Number) • 43, 46, 56
C
Changing Container File Location • 83
Checklist
Cleaning Secure Data • 59
Preparing to Work in Insecure
Environment • 59
Protecting Your Information • 125
Cleaning the Recycle Bin • 142
Compress or Encrypt Attribute Is Set for
the Container File • 67
Configuring ViPNet SafeDisk • 29, 30, 143
Connecting a Container • 26, 79, 130
Connecting a Container Using a Key File •
75
Connecting a Container with an External
Device • 76
Connecting an Existing Container • 72, 121,
130, 159
Container Access Security • 79, 118
Container export file • 97
Container file • 66, 173, 174
Container File Not Found • 159
Controlling Access to Protected
Information. Registering a New User • 28,
101, 130
Converting a Container • 25
Creating a Backup Copy of Container Keys
• 59, 64, 66, 74, 102, 120, 125, 127
Creating a Configuration Backup Copy • 40
Creating a Container • 59, 104, 130
Creating a User Defined Password • 35, 37
D
Danger Mode • 174
Deleting a Container • 60
Deleting Cookies • 142
Deleting Files Securely • 145
Deleting Temporary Files • 142
Deleting Temporary Internet Files • 142
Deleting Unprotected Files Securely • 142
Deleting Your Browsing History • 142
Destroying Confidential Information.
Extreme Danger Mode • 32, 126, 129
Digital roulette • 38
Disconnecting a Container • 68, 83, 89, 95,
109, 111, 112, 113, 124, 159
E
Exporting a Container • 59, 68, 107, 108,
113, 127
Exporting and Importing Protected
Information • 127
Extreme danger mode • 174
F
Finishing the Work with ViPNet SafeDisk •
32, 79, 116
Full Cleanup • 141
ViPNet SafeDisk 3.3. User's Guide
| 176
G
Generating a Random Password • 35, 37
I
If the Configuration of Your Computer Has
Been Changed • 42
Immediate Denial of Access to Protected
Information. Danger Mode • 82, 126, 129
Importing a Container Using a Backup
Copy of Container Keys • 74, 107, 112
K
Key Combinations for the Danger and
Extreme Danger Modes • 129
L
Launching ViPNet SafeDisk for the First
Time • 28
Limitations of a Free Edition • 23
P
Preparing for Work under Malicious Users'
Control • 129
Protecting Information with ViPNet
SafeDisk • 36
Providing Access to Your Container for
One or More Users on the Same or
Different Computer • 87, 118
R
Receiving Your Registration Code from the
Administrator • 45, 56
Regional Settings • 23
Registering ViPNet SafeDisk • 16, 23, 43,
49, 51, 52, 60
Removing Traces of Internet Explorer
Activities • 141
Removing Traces of Recently Opened
Documents • 142
Removing Traces of Secure Data on Your
Computer • 32
Removing Traces of Windows Activities •
141
Requesting a Registration Code • 43, 44, 55
Requesting Your Registration Code by
Email • 45
Requesting Your Registration Code by
Phone • 45
Requesting Your Registration Code on the
Internet (Online) • 45, 48, 51
Restoring Access to All Containers by
Restoring Configuration • 59, 107
Restoring Access to Protected Information •
80, 101
S
Saving Registration Data • 42, 48, 51, 54
Securely Cleaning Free Disk Space • 142,
145
Setting a User Password • 40, 117
Sharing Your Containers on a Network •
118, 125
Starting ViPNet SafeDisk • 26, 35, 79, 116,
130
Stopping Containers Sharing • 124, 125
Supported External Storage Devices • 15,
64, 160
System Administrator Actions for
Registration Using a File • 42, 51
U
Updating Container Keys • 84, 120
V
Viewing and Changing Container
Properties • 24, 107
W
Working while under Malicious Users'
Control • 129
ViPNet SafeDisk 3.3. User's Guide
| 177