Cryptainer
Cryptainer is Kent State University's supported file encryption product. Cryptainer creates an encrypted volume ( accessible via a drive letter, usually E: ) that is stored in a single file, similar to a zip file. Cryptainer volumes are password protected, and can be stored on your computer, or on a network drive. Download the official KSU version: http://licensed.kent.edu/cryptainer/KSU Cryptainer SE 6.0.exe Required Reading: Step-by-step instructions on how to create your first encrypted volume: cryptainer volume creation.pdf You must be an Administrator on your computer to install Cryptainer.
When to use Cryptainer
As a general rule of thumb, if theft or any other loss of data would potentially cause embarrassment to the University, the file should be stored in an encrypted form using Cryptainer. This applies specifically to any data stored locally on a desktop or laptop computer's hard drive, or on any type of removable media. The following is NOT an exhaustive list, but provides some examples of data that may need to be encrypted: Files downloaded from the mainframe WebFTP server Files containing social security numbers Files containing grades and other measures of student performance Files containing personal information about students, faculty, or staff Files containing any personal financial data Files containing any healthcare related data
Password Recovery Procedure
Expectations: - Password recovery is a lengthy procedure that will take 24-48 hours at a minimum to complete. - Recovery only reproduces the password used to encrypt the file, it will NOT recover the file or its contents. - The Cryptainer password log file must be intact on the PC hard drive in order to perform the recovery. When a user identifies that password recovery is necessary, the following procedure will be followed: 1. User contacts the help desk and opens a ticket including (at minimum): name of user, location of PC, and scheduled time for administrative visit. If a LAN Administrator is responsible for fielding the request for password restoration, he or she must still open a ticket in Service Desk for proper tracking of the request. 2. A LAN Administrator or client services representative will visit the PC at the appointed time. The user who owns the Cryptainer file must be present with a photo id to prove his or her identity. 3. The LAN Administrator or client services representative will extract the password log from the PC and provide it it to Security and Compliance staff. Transfer of the file should be by encrypted Lotus Notes e-mail, or removable storage media. 4. Both designated password recovery agents must be present to decrypt the password log. Once the password has been recovered, it may be sent back to the owner of the encrypted file. Transfer of the password may be by encrypted Lotus Notes e-mail, campus mail in a sealed envelope, or by telephone call initiated by a Security and Compliance staff member. In the case of a shared PC where multiple users have their own Cryptainer volumes, the recovery agent must be careful to identify and recovery only the correct password. If either file recovery agent is determined to be unavailable for more than 2 business days, a backup recovery agent will be designated to handle the password log decryption in his absence.