Decrypting SimplySecure data

When uninstalling a SimplySecure agent from a computer, if the correct removal process is not followed then the data on the computer may remain encrypted, and unreadable. Further action will be needed to decrypt it.

This article describes how to decrypt files previously protected by SimplySecure, and is divided into two parts:

• Decrypting files on a Windows computer
• Decrypting files on a Mac computer

The article explains how to decrypt all files on the computer, or just selected files or folders.

Note:
In the rare event that the user encryption keys for a computer are missing, then a SimplySecure Administrator with Full access permissions can use the DRA (Data Recovery Agent) to decrypt data on the PC without the logon credentials. Refer to knowledge article, KB0011098, Downloading the SimplySecure Data Recovery Agent (DRA) to a PC, for further information.

Decrypting files on a Windows computer

Removing, or uninstalling, the SimplySecure agent does not decrypt files on the computer that were previously encrypted using the Microsoft Encrypting File System (EFS). You must either:

1. Download, deploy and run a decryption utility, available in the SimplySecure Console Help menu, on encrypted Windows computers. This will decrypt all EFS-encrypted files on the computer.

Or, if you only want to decrypt selected files or folders,

2. Manually decrypt a single file or folder.

Both options are explained below.

Decrypting all files using the decryption utility

To decrypt all EFS-encrypted files on the computer, proceed as follows.

1. On the SimplySecure Console, top right hand corner, click on the HELP link, to open the Help page. 

There are two decryption Utilities available on the Help page: 

• The Decryption Utility decrypts files for the current user account only. 
• The Master Decryption Utility decrypts files for all user accounts on a computer. The Master Decryption Utility is available to administrators only.

2. Click on the required decryption utility link to start the utility.

For information about using these utilities, see the Readme file that downloads with the selected utility.

Manually decrypting selected files

To manually decrypt selected files only, proceed as follows.

1. Right-click on the file to be decrypted.
2. From the menu options, click Properties.
3. On the Properties page, click Advanced (located just above OK and Cancel).
4. Uncheck the box for the option, Encrypt contents to secure data.
5. Click Apply.

Note:
If you are decrypting a single item, the operation will be almost instantaneous (depending on the size of the file). If you are decrypting data that is <10GB, the operation will between 5 and 10 minutes. If you are decrypting data that is > 10GB, the operation will take more than 20 minutes.

Manually decrypting selected folders

The procedure to manually decrypt a single folder is very similar to that for decrypting a single file, but with one additional step. Proceed as follows.

1. Right-click on the folder to be decrypted.
2. From the menu options, click Properties.
3. On the Properties page, click Advanced (located just above OK and Cancel).
4. Uncheck the box for the option, Encrypt contents to secure data.
5. Click Apply.

Windows will present a prompt asking if the operation should be applied to the folder only, or to the folder and all of its contents.

6. Select the appropriate option and click OK.

Decrypting files on a Mac computer

If your organisation used SimplySecure to encrypt data on a Mac computer, and the SimplySecure agent has been uninstalled from the Mac, then data on the computer needs to be decrypted. This is done by turning off FileVault 2.

To turn off FileVault 2, and so decrypt a Mac computer, proceed as follows:

1. On the Mac, select the Apple menu icon and choose System Preferences.

The System Preferences folder opens.

2. In the System Preferences folder, click, Security & Privacy.

The Security & Privacy page opens.

3. On the Security & Privacy page, click FileVault and, if necessary, click the padlock icon , to unlock the FileVault 2 preference settings.
4. Click, Turn Off FileVault.
5. When prompted, enter the password for the Mac and click OK.

A decryption progress bar appears, which includes an estimate for how long it will take to decrypt data on the Mac computer.