Video Screencast Help
Search Video Help Close Back
to help
Not able to make it to Vision this year? Get a sampling in the Best of Vision on Demand group.

SEE 8.2 registry entry for encryption status?

Updated: 10 Jan 2012 | 2 comments
SKersey's picture
+1 1 Vote
Login to vote

Our company is upgrading from Guardian Edge 9.5.3 SP3 to SEE 8.2. When Guardian Edge was installed, there was a registry entry that gave a encryption status of the machine. Located at HKEY_LOCAL_MACHINE\SOFTWARE\Encryption Anywhere\Hard Disk\EAFS\Disk0, it would give one of four statuses: StatusEncrypted, StatusDecrypted, EncryptionInProgress, DecryptionInProgress. With SEE 8.2, there doesn't seem to be an equivalent. Is there a key I'm missing somewhere that gives this information?

Comments

sclarkso's picture
24
Jan
2012
0 Votes 0
Login to vote

Same question.  Pointsec let

Same question.  Pointsec let us see the status in the registry.  I can't seem to find similar information from SEE.

Symc_TomC's picture
26
Jan
2012
0 Votes 0
Login to vote

 @ Skersey - all the registry

 @ Skersey -

all the registry keys still exist in 8.2 and they still get populated under the _LOCAL_MACHINE\\SOFTWARE\\Encryption Anywhere\\Hard Disk\EAFS even with 8.2.

 You might have misread the underlying cause and attributed it to the software upgrade. If the permissions are not correctly set for Windows 7, another process cannot see these registry keys.

 Giving permissions on nested registry keys is rather painful in Windows 7 than it is on windows XP (you need to take ownership of registry key and propagate it before setting permissions etc)

 Here are the approximate steps needed to change registry permissions on Windows 7 (you should use this with a grain of salt). This is not an official method but will work. 

  1. Click Start -> run -> type regedit -> Registry Editor will open.
  2. Locate HKLM\SOFTWARE\Encryption Anywhere\Hard Disk\
  3. Right click on Hard Disk -> Permissions.
  4. Click on Advanced.
  5. Click on Owner tab.
  6. Select the currently logged  say userN (userN needs Windows admin privileges).
  7. Check the “Replace owner on subordinates and objects” check box.
  8. Click Apply.
  9. Click OK.
  10. Click on Permissions tab.
  11. Check the “Replace all child object permissions with inheritable  permissions from this object” check box.
  12. Click on Effective Permissions tab.
  13. Click on Select and select currently logged on userN.
  14. Make sure that all check boxes under Effective permissions are checked. If not, check them and click Apply.
  15. Click OK.
  16. Click on the currently logged on userN on the list of the users.
  17. Put check marks in the “Full Control,” “Read,” and “Special Permissions.”
  18. Click OK.
  19. Repeat steps 1 t0 18 for HKLM\SOFTWARE\Encryption Anywhere\Hard Disk\EAFS key

Tommy Cooper
Regional Product Manager (RPM)

Information Security Group | Encryption
Symantec Corporation