Skip to main content

 

Druva Documentation

Enable data encryption

inSync Cloud Editions: File:/tick.png Elite Plus File:/tick.png Elite File:/cross.png Enterprise File:/cross.png Business

Overview

As an administrator, you can use inSync setup to encrypt data on Windows laptops and desktops and Android devices.

Few things to note about data encryption by inSync:

  • inSync uses Encryption File System (EFS), a feature of Windows, to encrypt and decrypt data on your Windows laptops and desktops. For more information on how EFS works, see How EFS Works?
  • inSync does not backup the EFS keys used for encryption by Windows.
  • inSync can only encrypt data that resides in the configured backup folders. If you want to encrypt data in the inSync Share folder, see Encrypt inSync Share folder for Windows laptops and desktops.
  • To encrypt data on Android devices, inSync uses the built-in encryption mechanism provided by Android.
  • inSync does not backup data in encrypted format from Windows laptops and desktops or Android devices. Data is decrypted in plain text format and then backed up. Similarly, data is restored to the devices in plain text format and then encrypted again.
  • Encryption is not supported on Mac, Linux, Windows Phone, and iOS devices.

Enable data encryption for Windows laptops and desktops

Note:
  • You can enable data encryption for Windows laptops and desktops through profiles. You cannot do this on an individual user level.
  • As the encryption and decryption process is transparent to users, as an administrator you must be aware and also educate users about the best practices about EFS. For best recommendations, see Best practices for the Encrypting File System.

To enable data encryption

  1. On the inSync Management Console menu bar, click Profiles.
  2. Click the profile for which you want to enable encryption.
  3. Click the Devices tab > Data Loss Prevention, click Edit. The Edit Device Backup Configuration window appears.
  4. If you want to encrypt data from all folders that are configured for backup, in the Encrypt list, click All Folders.
    If you want to encrypt data from folders that inSync administrator has configured for backup, in the Encrypt list, click Admin Configured Folders. The list of administrator configured folders appear. You can select the folders that you want to encrypt.
  5. Click Save.

Enable data encryption for Android devices

Before you begin

Before you begin, ensure that inSync users can access inSync data by using the inSync mobile app. For more information, see Enable backup from mobile devices.

Procedure

You can enable data encryption for backup folders for Android devices of inSync users. On iPhones, data is encrypted by default. Therefore, data encryption through inSync is not required.

Note: You can enable data encryption for Android devices through profiles. You cannot do this on an individual user level.

To activate data encryption for Android devices

  1. On the inSync Management Console menu bar, click Profiles.
  2. Click the link of the profile for which you want to enable encryption.
  3. Click the Devices tab > Data Loss Prevention, click Edit. The Edit Device Backup Configuration window appears.
  4. In the DLP for Smartphones & Tablets area select the Encryption for android check box.
  5. Click Save.