12 www.hp.com HP ProtectTools Embedded Security Guide
HP ProtectTools Embedded Security
Encrypt Files and Folders
When working with EFS in Windows 2000 and Windows XP
Professional, consider the following:
■ Only files and folders on NTFS partitions can be encrypted.
(Files and folders on FAT partitions cannot be encrypted.)
■ System files and compressed files cannot be encrypted, and
encrypted files cannot be compressed.
■ Temporary folders should be encrypted, as temporary files are
potentially of interest to attackers.
■ A recovery policy is automatically set up when users encrypt a
file or folder for the first time. This ensures that users who lose
their certificates and private keys are able to use a recovery agent
to decrypt their data.
To encrypt files and folders:
1. Select the file or folder you want to encrypt.
2. Right-click the mouse or Touchpad.
3. Click Encrypt.
4. Click either Apply changes to this folder only or Apply
changes to this folder, subfolder and files.
5. Click OK.