Restoring access to encrypted files

When files are encrypted, Kaspersky Endpoint Security receives an encryption key required for directly accessing the encrypted files. Using this encryption key, a user working under any Windows user account that was active during file encryption can directly access the encrypted files. Users working under Windows accounts that were inactive during file encryption must connect to Kaspersky Security Center in order to access the encrypted files.

Encrypted files may be unaccessible under the following circumstances:

To gain access to encrypted files, the user needs to start the recovery procedure (Request-Response).

Recovering access to encrypted files consists of the following steps:

  1. The user sends a request access file to the administrator (see the figure below).
  2. The administrator adds the request access file to Kaspersky Security Center, creates an access key file and sends the file to the user.
  3. The user adds the access key file to Kaspersky Endpoint Security and gains access to the files.

    KES11_Encryption_Request

    Restoring access to encrypted files

To start the recovery procedure, the user needs to attempt to access a file. As a result, Kaspersky Endpoint Security will create a request access file (a file with the KESDC extension), which the user needs to send to the administrator, for example, by email.

Kaspersky Endpoint Security generates a request access file for access to all encrypted files stored on the computer’s drive (local drive or removable drive).

How to obtain an encrypted data access key file in the Administration Console (MMC)

How to obtain an encrypted data access key file in the Web Console

After receiving the encrypted data access key file, the user needs to run the file by double-clicking it. As a result, Kaspersky Endpoint Security will grant access to all encrypted files stored on the drive. To access encrypted files that are stored on other drives, you must obtain a separate access key file for each drive.

Page top