No Reflex DataVault utilises virtual disk encryption.

No Reflex DataVault creates a "virtual" disk from the free space you allocate on your hard drive.

Reflex DataVault can be run on MS Windows 9x, ME, NT, 2000 & XP.

Reflex Magnetics believe this form of security provides the maximum flexibility. If the password is forgotten then no matter where the user is located the Administrator can provide access via a “Challenge Response” system immediately.

If the password/phrase is to be used directly to unlock the drive and is stored in clear text this would be an obvious weakness. But Reflex Data Vault uses the password/phase to decrypt the key that locks the drive and therefore does not directly store the password/phase at all.

Reflex DataVault is one of very few products to have been independently tested by crypto analysts working for the UK Government (GCHQ – CESG). Thereby even if you select our corporate product you can be assured that the architecture and implementation have been independently approved.

Yes it is possible to deploy Reflex DataVault across a LAN with the security settings pre-configured.

Yes, if you are using the MS Windows 9x operating systems you can have any number of drive configured for use and have multiple drives ready for use. If however you use MS Windows NT/2000/XP you can have multiple drive but only have one available for use at any one time.

Data within the encrypted drive can be backed up using any standard back up utility if the drive is unlocked. Please note if this method is used all data will be backed up in clear text. If an encrypted backup is required the DataVault HMG container file can be located by searching for any files with a .dvc extension. This file can then be backed up and all data will be stored in encrypted format.

During installation, select the ‘Hide Drives’ feature. This will make the DataVault HMG drive the only visable drive to save data within ‘My Computer’.

All CESG key material must be physically secured in a safe.

It is possible to configure a DataVault HMG drive for each user that logs onto the machine. This can be configured within the DVHMG Admin console, using the Key Material supplied by CESG.

Ensure that all details are entered correctly and exactly as shown on the registration label. The Company Name must be entered with capitals in the correct places and the reg code ‘O’s are ‘0’s (zero’s).

The DataVault Key Server enables the administrator to assign DataVault HMG keys for designated users and remotely distribute them to users across the network. The DataVault HMG drive will have no user assigned until they log in and the Key Server distributes the correct keys.

By opening the ‘Control Panel’ and opening the ‘DataVault Admin Tool’ then selecting the drive, clicking the ‘Configure’ option enables you to change the ‘Account Status’ from ‘Disabled’ to ‘Enabled’. This will then allow you to re enter your password to and open the Vault. If you require the user to change the password, you must perform a ‘Key Injection’.

Navigating through the ‘DataVault HMG Admin Tool’ and Configuring the container, allows the administrator to change the number of login attempts between 1-9.

This can be achieved using Reflex Deployment Server and the Reflex DataVault HMG Key Server. For further information please see the ‘Network Deployment’ section of the online help.

Key Injection allow the system administrator to re-inject encryption keys back into the DataVault HMG drive if the password is unknown. This will allow the ability to create new passwords for access. Please note only the original encryption key used to install the DataVault HMG drive must be used.

Enables the main disk encryption key to be changed at periodic time intervals. When the Key is upgraded the whole of the container is decrypted with the current Key and then re-encrypted with a new key.

During the installation of the upgraded version the administrator will be prompted to either ‘Create a new container’ or ‘Remount an existing container’. By remounting an existing container the administrator is able to configure and remount the existing container (whilst the information inside remains emcrypted). The existing access passwords will be retained.

Reflex DataVault HMG is approved to protect restricted information.

The ‘Key Inject’ function will enable the ability to re-inject the encryption key and allow the generation of new passwords. For further information please consult the DataVault HMG online help.

3DES (Data Encryption Standard) or AES (pending) (Advanced Encryption Standard)

Providing the encryption key was installed using the DataVault HMG Key Server the ‘Key Re-Issue’ option can be used. This will enable the administrator to retrieve the original encryption keys and re-encrypt it to the user’s record enabling a new set of password to be generated.

The DataVault drive is automatically locked on log off or shut down. The drive can be manually locked by right clicking on the DataVault drive icon and selecting ‘Lock Drive’.

Reflex DataVault HMG supports and is approved for use on MS Windows NT, MS Windows 2000 and MS Windows XP.

Windows NT4 Service Pack 6a, Internet Explorer v5.5+, Windows 2000 will require Service pack 2 with Internet Explorer 5.5+ and Windows XP with Internet Explorer 6+.

The DataVault HMG Admin Tool can be used to manage the current vault. From within the DataVault HMG Admin Tool it is also possible to create and manage new encrypted drives.

4 TeraBytes is the maximum.

It is advisable to leave enough free space for the Windows Swap File.

Reflex Magnetics Ltd will provide the Registration Code and instant viarables.CESG will issue the Key Material.

DataVault HMG can be configured to automatically purge the Windows swap file on shutdown. This is an option configured during installation.

CESG state that the disk encryption key should be upgraded once a year.