Requirements

In order to use the Synchronized Encryption features, the following requirements must be met:

  • SafeGuard Enterprise Server, Database and Management Center are set up properly.
  • The Synchronized Encryption component must be installed on the Windows endpoints and SafeGuard File Encryption must be installed on macOS endpoints.
    • On Windows endpoints Synchronized Encryption replaces all other SafeGuard Enterprise File Encryption modules. It cannot be installed in addition to Data Exchange, File Encryption, or Cloud Storage. File encryption policies that are used by these location-based modules are incompatible with the new application-based Synchronized Encryption policies. If you migrate from the SafeGuard Enterprise File Encryption module to the Synchronized Encryption module and keep the location-based policies, the RSOP in the SafeGuard Management Center will still show both, but only the application-based policy is valid. The reason for this is that the calculation of the RSOP does not consider the modules installed on an endpoint.

    • The Synchronized Encryption module is not compatible with SafeGuard LAN Crypt.
  • In order to activate the features you need to do the following:
    • Create an application list.
    • Create application-based file encryption policies (Synchronized Encryption).
    • Create policies for activating the Outlook Add-in (encrypts email attachments according to policy settings).
    • Create policies for activating the integration with Sophos Endpoint Protection (removing keys if malicious activity is detected on endpoints).
    • Configure the sharing of the SafeGuard Enterprise key ring with mobile devices managed by Sophos Mobile.
    • Deploy the policies.

      On Macs only user policies apply. Machine policies are ignored.