Encryption in Kaspersky Endpoint Security 10 for Windows

This article concerns Kaspersky Endpoint Security 10 for Windows:

• Service Pack 2 Maintenance Release 4 (version 10.3.3.304)
• Service Pack 2 Maintenance Release 3 (version 10.3.3.275)
• Service Pack 2 Maintenance Release 2 (version 10.3.0.6294)
• Service Pack 2 Maintenance Release 1 (version 10.3.0.6294)
• Service Pack 2 (version 10.3.0.6294)
• Service Pack 1 Maintenance Release 4 (version 10.2.6.3733)

With Kaspersky Endpoint Security 10 for Windows, you can encrypt:

• files stored on local hard disks of your workstation;
• files stored on removable media;
• entire removable drives;
• entire hard disk drives.

Encryption of files on local hard disks of a workstation

1. The administrator generates file lists in the policy according to file extensions or groups of extensions, and folders contained on hard disks of client hosts.
2. Next, the administrator creates actions in the policy to be used by the application to encrypt files belonging created by different software.
3. The application encrypts and decrypts files after applying the policy.

Encryption of data on removable media

1. The administrator creates a default encryption rule in the policy to be applied to all removable drives. This default rule has the lowest priority.
2. The administrator creates rules for individual removable device models.
3. The administrator creates rules for removable drives with paricular IDs. This is the top priority rule.
4. The application encrypts and decrypts files after applying the policy according to the rule priority.

Managing applications' access permissions to encrypted files

The administrator can configure rules of access to encrypted files for any software. Access can be either allowed (in the form of ciphertext only) or denied.

Creating encrypted archives

The user can create encrypted archives and password-protect them.

Encrypting hard disks

1. The administrator creates a default encryption rule for all hard disks in the policy.
2. The administrator generates a list of hard disks excluded from encryption.
3. After applying the policy, the application encrypts all logical partitions of hard disks sector by sector.

Learn more about hard drive encryption