VIAS DE ACCESO AL MERCADO CANADIENSE

Before you encrypt your disk, be sure to back it up so that you will not lose any data if your laptop or computer is lost, stolen, or you are unable to decrypt the disk.

Caution: While your disk is encrypting, do not accept any operating system updates if they are offered. If the update occurs automatically, do not restart your computer until the encryption process has completed.

To protect a disk using the Symantec Drive Encryption feature

1 Open Symantec Encryption Desktop and click on the PGP Disk item. The PGP Disk screen is displayed.

2 Click Encrypt a Disk. The Encrypt Disk screen is displayed, showing a listing of disks on your system that can be protected.

3 From the Select a disk list, click on the disk you want to protect and click Continue.

4 In the Choose Your Encryption section, specify how you want to access your protected disk: Public Key or Passphrase.

Protecting Disks with Symantec Drive Encryption Encrypting a Disk

121

Note: If you are encrypting a boot disk, you can only use passphrase

authentication, so Symantec Encryption Desktop selects Passphrase User for you and jumps directly to the Add Whole Disk Encryption User screen.

ƒ If you want to protect your disk with a public key, select Public Key, then click Continue. The Add Whole Disk Encryption User screen is displayed. This option is not available if you have already encrypted your disk. Select a key from the list, then click Continue. The Enter Encryption Desktop Passphrase dialog box is displayed.

Type the passphrase for the key you selected, then click OK. The Symantec Drive Encryption Summary screen displays, showing you a summary of how your disk is going to be encrypted, what key is used, and so on.

ƒ If you want to protect your disk with a passphrase, select Passphrase, then click Continue. The Add Whole Disk Encryption User screen is displayed. Type a Name (or accept the default name), then type the desired passphrase in the Enter your passphrase field, and then type it again in the Confirm your passphrase field. To see your passphrase as you type, select Show Keystrokes. The Passphrase Quality bar provides a basic guideline for the strength of the passphrase you are creating by comparing the amount of entropy in the passphrase you type against a true 128-bit random string (the same amount of entropy in an AES128 key). For more information, see The Passphrase Quality Bar (on page 174).

5 Click Continue. The Symantec Drive Encryption Summary screen is displayed, showing you a summary of how your disk is going to be encrypted, what key is used, and so on.

6 Review the information displayed. If you want to enable Power Failure Safety, select the check box.

While you can pause the initial encryption process at any time by properly shutting down or restarting your computer, it is exceptionally important to avoid unexpected shutdowns (power failures, power cord gets pulled out, and so on). If this is a possibility for you—or if you do not have an uninterruptible power supply for your computer—consider choosing the Power Failure Safety option. When Power Failure Safety is selected, encrypting is journaled; if the power fails, the encryption process can safely and accurately resume where it was interrupted. However, this option can cause initial encryption to take several times longer to complete.

This is also useful when encrypting USB devices. Interrupting encryption by removing a USB device during encryption can corrupt the device and require that it be reformatted. Encrypting with Power Failure Safety mode permits you to remove the USB device during encryption and resume encryption once it is reinserted.

7 Click Encrypt. The encryption process begins and the Encryption Progress screen is displayed.

8 Click Close. The Symantec Encryption Desktop screen is displayed; the encryption process continues in the background. A progress bar shows how the encryption process is progressing.

Note: The encryption process continues even if you close the Encryption Progress screen. However, you can not see the progress bar until you close this screen.

122 Protecting Disks with Symantec Drive Encryption Using a Symantec Drive Encryption Encrypted Disk

9 During the encryption process, you can do the following:

ƒ To temporarily stop the encryption process, click Stop. The Encryption is not complete dialog box is displayed.

ƒ Pause the encryption process, Decrypt the portion of the disk that is already

encrypted, or Cancel to close the dialog box and continue with the encryption process.

Note: If the encryption process stops and Symantec Encryption Desktop indicates a disk read/write error, it means that Symantec Encryption Desktop has encountered bad sectors on your disk during the encryption process.

Immediately reverse the encryption process by decrypting the portion of the disk that has been encrypted. Then use your disk verification tools to find and resolve the problem.

When the encryption process completes, the disk properties for the encrypted disk is displayed and include the description, type of disk, size, encrypted status, and the user access information.