FAQ

   


FAQs by Category 

Installation Guide


 
 
FAQ No.:00046 
Category:Curtain Client; Feature - Basic; Feature - Copy Out; Feature - Encrypt Out 
 
Question:How to share Protected files with others?
 
Answer:There are many ways for administrators to grant permission to users/computers to share protected files with others.

If you only want users to share protected files within company, please refer to "Scenario 1" stated below.
If users need to share protected files with external parties, there are 4 options:
- allow users to encrypt any protected files with password, and the files can be decrypted anywhere. Please refer to "Scenario 2" stated below.
- allow users to save/send files out of Protected Zone by particular application. Please refer to "Scenario 3" stated below.
- allow users to copy files out of Protected Zone by file type (FAQ 00206).
- users can submit request for approval (FAQ 00147)

(Scenario 1) user is authorized to encrypt and save the encrypted files out of Protected Zone. The files can be ONLY decrypted in Protected Zone.
(Scenario 2) user is authorized to encrypt and save the encrypted files out of Protected Zone. The files can be decrypted anywhere with entering correct password, and no longer under Curtain e-locker protection.
(Scenario 3) user is authorized to save/send files out of Protected Zone through particular application. The files are no longer under Curtain e-locker protection.

Scenario 1 - Encrypt out (Decrypt in Client only):
This function is very useful for users to share protected files within company. Therefore, you can grant this function to most of the users.

If a user is allowed to Encrypt Out (Decrypt in Client Only), the user can encrypt Protected files and share the encrypted files with others. When other users receive the files, their workstations must have Curtain Client (pointing to Curtain Admin with the same Authorization String) installed. The users can double-click the files to decrypt them. Files will be automatically decrypted to Local Protected Directory.

Steps to grant the right "Encrypt Out (Decrypt in Client Only)":
1. In Curtain Admin, select a Policy Group and right-click to select "Properties".



2. Click "Copy Options" button, select the second option as below and click OK to confirm.



Steps to share encrypted files with others:
1. In Curtain Client, select a protected file and right-click to select "Encrypt to (Decrypt in Client only)". Then an encrypted file will be copied to destination.



2. Send the encrypted file to others. Since the file is encrypted, the file is safe during transmission (e.g. USB flash drive or Email).



3. When user receives the file, the user simply double-clicks the file. It will be decrypted to Local Protected Directory.

Scenario 2 - Encrypt out (Decrypt Anywhere):
Actually the users can get all protected files after entering correct password. Therefore, this function should be only granted to authorized users.

If a user is allowed to Encrypt Out (Decrypt Anywhere), the user can encrypt Protected files with password and share the encrypted files with others. When other users receive the files, they can decrypt the files with entering correct password.
P.S. Curtain Client is not needed for the decryption. After the files are successfully decrypted to plain files, Curtain will not protect the plain files anymore.

Steps to grant the right "Encrypt Out (Decrypt Anywhere)":
1. In Curtain Admin, select a Policy Group and right-click to select "Properties"

2. Click "Copy Options" button, select the first option as below and click OK to confirm.



Steps to share password-encrypted files with others:
1. In Curtain Client, select a protected file and right-click to select "Encrypt to (Decrypt Anywhere)".

2. Set Password and click OK. Then an encrypted file will be copied to destination.



3. Send the password-encrypted file to others. Since the file is encrypted, the file is safe during transmission (e.g. USB flash drive or Email).



4. When user receives the file, the user simply double-clicks the file. After user enters correct password, the file will be decrypted to destination.

Scenario 3 - Save/Send file out by particular application:
When some users need to share protected files with external parties frequently or you don't need to control them to use protected files, then you can allow them to save protected files out of Protected Zone through particular application. This function should be only granted to authorized users. Please refer to FAQ00084 or Section 5.2 in the Installation Guide for the setup.

After protected files are saved/sent out of Protected Zone, the files are no longer under Curtain e-locker protection.