Drive Encryption key recovery service.

The SafeBoot Recovery Service. It stores a copy of the encryption key, enabling you to access your computer if you forget your password and do not have access to your local backup key. You must create an account with the service to set up online access to your backup key.

Drive Encryption logon screen.

A logon screen that is displayed before Windows starts up. Users must enter their Windows user name and the password or Smart Card PIN. Under most circumstances, entering the correct information at the Drive Encryption logon screen allows access directly into Windows without having to log in again at the Windows logon screen.

DriveLock

Security feature that links the hard drive to a user and requires the user to correctly type the DriveLock password when the computer starts up.

emergency recovery archive.

Protected storage area that allows the reencryption of basic user keys from one platform owner key to another.

Encryption File System (EFS).

System that encrypts all files and subfolders within the selected folder.

encryption.

Procedure, such as use of an algorithm, employed in cryptography to convert plain text into cipher text in order to prevent unauthorized recipients from reading that data. There are many types of data encryption, and they are the basis of network security. Common types include Data Encryption Standard and public-key encryption.

free space bleaching.

The secure writing of random data over deleted assets on the hard drive to distort the contents of the deleted assets, making recovery of the data more difficult.

key sequence.

A combination of specific keys that, when pressed, initiates an automatic shred—for example, Ctrl+Alt+S.

manual shred.

Immediate shredding of an asset or selected assets, which bypasses the automatic shred schedule.

migration.

A task that allows the management, restoration, and transfer of Privacy Manager Certificates and Trusted Contacts.

network account.

Windows user or administrator account, either on a local computer, in a workgroup, or on a domain.

personal secure drive (PSD).

Provides a protected storage area for sensitive information.

power-on authentication.

Security feature that requires a password when the computer is turned on.

Privacy Manager certificate.

A digital certificate that requires authentication each time you use it for cryptographic operations, such as signing and encrypting e-mail messages and Microsoft Office documents.

Public Key Infrastructure (PKI)

Standard that defines the interfaces for creating, using, and administering certificates and cryptographic keys.

reboot.

Process of restarting the computer.

reveal.

ENWW

Glossary 59