User manual SOPHOS SAFEGUARD DISK ENCRYPTION 4.60 HELP 6-2009

[. . . ] Sophos SafeGuard® Disk Encryption 4. 60 help Document date: June 2009 Contents 1 2 3 4 5 6 7 8 9 Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Getting started. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Local installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Central installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] During this time period the user cannot change the password. This option prevents the user from resetting the original password. The default value is 0. 80 Sophos SafeGuard® Disk Encryption 4. 60, help 15. 4. 4 Password history To prevent the user from constantly changing between a small number of passwords you can set the number of password generations to be higher. Each password is compared with the ones used in the past and rejected if it matches an old password. This setting controls how many passwords, that were used in the past, are saved for comparison. The maximum number of used passwords that can be saved is 16. After clicking in the input field you can set the value, either by typing it or by clicking on the direction keys. It is especially useful to specify a number of password generations in combination with the setting "Change password after "n" days" (see Password change after on page 85). Example: The number of password generations has been set to 4 for the user Miller, and the number of days after which the user must change their password has been set to 30. Up to now, the user Miller has logged on using the Sophos SafeGuard Disk Encryption password "Computing". After the period has expired, Miller is prompted to change their password in the Sophos SafeGuard Disk Encryption logon screen during PBA. User Miller types "Computing" again, and sees an error message that this password has already been used, and they must choose a different password. User Miller cannot reuse "Computing" again until after the fourth prompt to enter a new password (since Password Generations has been set to 4). 81 Sophos SafeGuard® Disk Encryption 4. 60, help 15. 4. 5 Syntax rules (letters, digits, symbols, opposite case) To increase the effectiveness of passwords you can require a mixture of letters and numbers (and/ or symbols). The number entered is always a minimum value. Symbols are special characters such as * # !"§$%&/() etc. Opposite Case means that exactly the specified number of capital letters and lower case letters must be used in the password. Example: The example below shows the correct usage of syntax rules: Settings Letters: 1 Numbers: 2 Symbols: 1 Opposite case: 2 Result: AAaa12# is allowed aaAA123## is allowed 3456## is rejected AAB1# is rejected Existing user passwords still apply, even if they not longer meet the specifications. The rules only take effect if the user changes their password. 82 Sophos SafeGuard® Disk Encryption 4. 60, help 15. 5 Forbidden passwords You can use the Undesirable Passwords setting to define particular character strings that cannot be used in Sophos SafeGuard Disk Encryption passwords. Every new password is compared against the list and only accepted if it is not present in the list. You can import an existing list or enter forbidden passwords yourself. 15. 5. 1 Defining forbidden passwords Double-click "Passwords" below "Undesirable Passwords". In the "Configure Undesirable Passwords" text box, enter character combinations that are not permitted, separating them with Ctrl +Enter keys. Enter trivial passwords such as test, system, user etc. Each password which is significantly similar to the forbidden password will be rejected. [. . . ] The logon to [PN] was successful, but you \ndon't have sufficient rights to uninstall the product. 1603 1605 162 Sophos SafeGuard® Disk Encryption 4. 60, help Administration errors - USER 1801 User '%1' cannot be created because \nthe maximum count of users has been exceeded. It is not possible to create or delete the '*AUTOUSER'. Please specify another user identification name. The maximum count of users has been exceeded. [. . . ]