Offline unlock settings
DriveLock can temporarily unlock locked removable media even if the computer is offline.
The associated wizard can be enabled or disabled with this setting.
The following options are available on the General tab:
-
If you select Disable offline unlock requests, the end user will no longer be able to launch the wizard from the taskbar icon context menu and thus request offline sharing.
-
The Use short (weak) request / response codes option allows you to reduce the complexity of challenge-response codes to fewer characters when releasing offline.
Reducing the complexity also significantly reduces the security of this process.
-
To completely disable the use of the wizard, you must also disable the Show offline unlocking in context menu of notification area icon.
-
You can specify a message text for the end user.
On the Security tab, you can specify if an authentication by entering a password is required when accessing the offline unlock or if DriveLock allows access to this functionality by means of a user certificate from the local Windows certificate store.
-
Select Use password if authentication is to be performed using a password. Enter and confirm the appropriate password.
-
Select Use certificate if you want to authenticate using a certificate. It can be either imported from a file or read from the local certificate store. If you click the Import from store button, you will be prompted to select one of the displayed certificates.
If you are using a certificate, you must enter the password to access the certificate's private key when approving the share.
You can also import the certificates via the DOC. Open the Certificates view and add the appropriate certificate. Thus, the offline unlock can be done conveniently via this certificate. A password is no longer required, only the user's permissions are relevant (that is, the roles needed for certificate management and for offline unlocking must be assigned).