18.3 USB Encryption Client Management
Navigate to Tools > Client Management > USB Encryption Client Management to centrally manage USB encryption clients. Only authorized USB encryption clients will appear in the list within this window.
The USB encryption client list includes the following attributes:
Attribute Name |
Description |
UDiskID |
The unique identifier of the USB drive configured as an encryption client. This ID remains unchanged even after formatting. |
Name |
The name assigned during the authorization of the USB encryption client. |
Group |
The computer tree group to which the USB encryption client belongs. |
Authorization Status |
The authorization status of the USB encryption client (e.g., Authorized, Unauthorized). |
Version |
The version of the USB encryption client. |
Expiration Time |
The expiration date set during the authorization of the USB encryption client. |
Installation Time |
The time when the USB drive was configured as an encryption client. |
Last Online Time |
The last time the USB encryption client connected to the server. |
Authentication Interval |
The set authentication interval for the USB encryption client. |
Operations for USB Encryption Clients:
Operation |
Description |
 |
Grant authorization to a USB encryption client. Authorized clients are marked with an icon ; |
 |
To delete a client, the USB drive must be physically inserted into the console-running machine. After deletion, the USB drive must be fully reconfigured to regain encryption client functionality. |
 |
Adjust authorization settings for the USB encryption client. Options include Global Settings (default) and Custom Settings. |
 |
Export the policy configuration file for the currently selected USB encryption client. |
 |
Reactivate a previously disabled USB encryption client. |
 |
Disable the client, revoking its encryption capabilities until re-enabled. |
 |
Configure password complexity requirements, including Global Settings (default) and Custom Settings.
Custom settings override global settings. Clients with custom password complexity rules are marked with a # prefix before their UDiskID.
|
When authorizing a USB encryption client, the configuration options are as follows:
Setting Item |
Description |
Import Removable Disk Info |
Import the authorization file required for setup. |
File Path |
Select the exported USB information file (with .uea extension). |
Removable Disk Authorization Info |
Configure authorization details for the USB drive. |
UDiskID |
The unique identifier of the USB drive, automatically generated by the system and cannot be modified. |
Removable Disk Name |
Assign a name to the USB drive, which will be displayed in the console's computer tree. |
Group |
Specify the group to which the USB client belongs. |
Valid Until |
Set the expiration date for the USB client's authorization. Beyond this date, encryption features will be disabled. If left unchecked, the authorization remains permanent. |
Authentication Interval |
Enable this option and set a number of days. The client must connect to the server at least once within this period; otherwise, it will expire and lose encryption functionality. |
USB Encryption Client Password Settings:
Setting |
Description |
Change Password at First Login |
If enabled, the user must change the password upon first login. The USB client cannot be used until the password is updated. |
Password Complexity |
Settings for password strength requirements. |
Password Cannot Be Empty |
If enabled, an empty password will be rejected. The user must set a non-empty password to log in. |
Minimum Password Length |
If enabled, passwords shorter than the specified length will be rejected. The user must meet the length requirement to log in. |
Password Complexity Validation |
If enabled, passwords failing complexity rules (e.g., lacking uppercase letters, numbers, or symbols) will be rejected. The user must comply with the rules to log in.Click the to view complexity requirements. |
Password Attempt Limit |
Settings for limiting incorrect password attempts. |
Enable Password Attempt Limit |
If enabled, the USB client will be locked after exceeding the specified number of failed attempts. The lock can be temporary (e.g., 30 minutes) or permanent until manually unlocked. |
Note:
- If a USB encryption client is permanently locked, the lock can be removed by resetting the password.
Don't see what you're looking for?