How to Encrypt and Use CD/DVD ROMs with Check Point

Endpoint Security

1.) Place the blank CD/DVD ROM in your drive. From the status menu, you should then

see the following pop-up window. Press 'Encrypt' to start the encryption process.

2.) The Endpoint Security Encryption window will appear. You have two options to add

data to the media. Both methods can be used on the same media.

To Select a Folder for Encryption

- From the previously noted window, under 'Please select files to add to the

encrypted media', choose the icon on the far left, (folder with a 'plus' sign).

The following window should appear:

- You should now be able to navigate to the folder. In this example, we have

chosen a folder on C:\NLG named NLG Test. Click 'OK' to continue.

- The folder should now be listed as being available to be burned to the media.

To Select a File(s)for Encryption

- From the previously noted window, under 'Please select files to add to the

encrypted media', choose the middle icon, (document with a 'plus' sign). The

following window should appear:

- From the 'Open File' window, navigate to the files you wish to burn to the

media. In this example, we have chosen some individuals files on the local

hard drive.

NOTE: Multiple files may be selected at once. To select a consecutive list of

files, select or click the first in the series by holding down the SHIFT key,

then select or click the last file in the consecutive series. You may also click

CTRL-A to select all files within a folder.

- The files should now be listed as being available to be burned to the media.

NOTE: To remove files from the queue, select or click the file(s) to remove and

hit the icon with the red 'X'. This will delete the file from the queue.

NOTE: At this moment, you do not have the ability to drag-and-drop files into

this window.

3.) You will be prompted for a password. This password will be used to gain access to

this media under the following circumstances:

a. Your PC is offline and cannot connect to the Endpoint Security Server

b. The PC that you insert this CD/DVD is not the device originally used to

encrypt this media.

The complexity requirements for the password are listed in the window, highlighted

in green.

4.) With the password entered, select 'Encrypt' to start the burn. You should see a status

window appear, prompting through the burning process.

5.) Once the disc indicates that the process has completed, select 'Close' to close the

window. The CD/DVD is now fully encrypted.

6.) If you insert the CD/DVD into the same computer from which you burned the

media and logged on as the same user, you will NOT need to used the password to

gain access to the media.

The CD/DVD will read without any additional prompting or security.

7.) If you insert the CD/DVD when your device is offline OR the device is NOT the

PC from which you originally burned the media, you will need to use the

password to gain access to the media:

Password Access from a PC that is Not Connected to the Endpoint Security Server

- Your Endpoint Security software is designed to communicate to a server if the

PC is attached to the internet. If your PC is not communicating to the internet,

the device will be considered offline.

- When your PC is offline, you will be prompted to enter a password to gain

access to the device.

- Enter the password you provided when the CD/DVD ROM was encrypted.

- Once you have successfully provided the correct password, you will have

access to the files.

Password Access from a PC which does not have the Endpoint Security Agent

- When the CD/DVD ROM is inserted, the media will be detected as 'EPM

Encrypted Disk'

In this example, the 'E:' drive contains the encrypted CD/DVD ROM.

- You MAY be prompted to enter your media password (the password you

provided when you encrypted the CD/DVD ROM). If you are not

prompted, you will have to manually launch password prompt.

Double-click on the drive. This will show the contents of the

drive.

NOTE: Your data will not appear within this window. The drive needs to

be unlocked before you have access to your encrypted data.

Double-click the 'Unlock.exe' (It may just appear as 'Unlock' on

your system).

You will be prompted for your password. Supply the password

you assigned to the media during the encryption process.

Once you enter the password, you will gain access to your

encrypted files. Files can be opened and copied from the

CD/DVD.

Note: As the CD/DVD is read only, you cannot save files to the

media.

8.) If you close or eject the media AND you have copied files off the disk to the PC,

you will be asked if you want to securely delete.

This is a security feature that allows you to securely delete any document copied from

the media onto a PC. This is an optional step, and allows you to securely remove

data from a PC if so desired. It is a more secure option than placing the data in the

Recycle Bin as it completely removes any trace of the copied files on the PC. It does

not remove the files from the CD/DVD ROM media.

To Securely Remove Copied Encrypted Data from a PC

- When the 'EPM Explorer - Confirm Secure Deletion' window appears,

select 'Yes'.

- You can drag-and-drop any folders you wish to securely delete into the

window. You may also use the 'Add Files' or 'Add Folder' options to add

files. To remove any files from the list, highlight the files and select

'Remove From List'.

- Click 'OK to remove the files. Deleted files on the PC cannot be

recovered.

To Leave Copied Encrypted Data on a PC

- When the 'EPM Explorer - Confirm Secure Deletion' window appears,

select 'No'.

- The files will remain on the PC.