6.4 Importing Encryption Keys

The Endpoint Security Agent uses encryption keys to encrypt and decrypt removable data drives. You can import encryption keys from a key file to:

  • Use the encryption keys from another ZENworks Management Zone. This allows users to decrypt removable drives that were encrypted in the other zone.

  • Restore a backup of the zone’s encryption keys.

To import encryption keys:

  1. In ZENworks Control Center, navigate to Policies and click the policy link for the Microsoft Data Encryption policy that you are using in your zone, and then select the Details tab.

  2. Under Common Tasks (in the left navigation pane) click Encryption: Import Keys.

  3. In the File Name field, click to browse for and select the encryption key file.

  4. In the Password field, specify the file’s password.

    This password was assigned when the keys were exported to the file.

  5. If you want to change your zone’s active key to the active key included in the file, select the Use the active encryption key from the imported file option.

    A Management Zone can have one or more encryption keys. At any one time, however, there is only one active key. The active key is used to encrypt new removable data drives. The non-active keys are retained in order to decrypt files that were encrypted when the non-active keys were the active keys.

  6. Click OK.