Skip to main content


 

 

How can we help you?

 

Druva Documentation

Enable data encryption

Heads up!

We've transitioned to a new documentation portal to serve you better. Access the latest content by clicking here.

License editions: To understand the applicable license editions, see Plans & Pricing.

Overview

As an administrator, you can use inSync setup to encrypt data on Windows laptops and desktops and Android devices.

Few things to note about data encryption by inSync:

  • inSync uses Encryption File System (EFS), a feature of Windows, to encrypt and decrypt data on your Windows laptops and desktops. For more information on how EFS works, refer to  Microsoft Support.
  • inSync does not backup the EFS keys used for encryption by Windows.
  • inSync can only encrypt data that resides in the configured backup folders.
  • To encrypt data on Android devices, inSync uses the built-in encryption mechanism provided by Android.
  • inSync does not backup data in encrypted format from Windows laptops and desktops or Android devices. Data is decrypted in plain text format and then backed up. Similarly, data is restored to the devices in plain text format and then encrypted again.
  • Encryption is not supported on Mac, Linux, Windows Phone, and iOS devices.

For more information, see Encryption File System FAQs.

Enable data encryption for Windows laptops and desktops

Note:
  • You can enable data encryption for Windows laptops and desktops through profiles. You cannot do this on an individual user level.
  • As the encryption and decryption process is transparent to users, as an administrator you must be aware and also educate users about the best practices about EFS. For best recommendations on Encrypting File System, refer to Microsoft Support.

To enable data encryption

  1. On the Endpoints console, click Profiles.
  2. Click the link of the profile for which you want to enable encryption.
  3. Click the Endpoints tab > Edit > Endpoints. The Edit Profile window appears. Navigate to Data Loss Prevention > DLP for Laptops and Desktops  section.
  4. Click Allow Encryption. If you want to encrypt data from all folders that are configured for backup, in the Encrypt list, click All Folders.
    If you want to encrypt data from folders that inSync administrator has configured for backup, in the Encrypt list, click Admin Configured Folders. The list of administrator configured folders appear. You can select the folders that you want to encrypt.
  5. Click Save.

Enable data encryption for Android devices

Before you begin

Before you begin, ensure that inSync users can access inSync data by using the inSync mobile app. For more information, see Enable backup from mobile devices.

Procedure

You can enable data encryption for backup folders for Android devices of inSync users. On iPhones, data is encrypted by default. Therefore, data encryption through inSync is not required.

Note: You can enable data encryption for Android devices through profiles. You cannot do this on an individual user level.

To activate data encryption for Android devices

  1. On the Endpoints console, click Profiles.
  2. Click the link of the profile for which you want to enable encryption.
  3. Click the Endpoints tab > Edit > Endpoints. The Edit Profile window appears. Navigate to Data Loss Prevention > DLP for Smartphones and Tablets section.
  4. In the DLP for Smartphones and Tablets section, select the Enable encryption for android check box and click Save.