2083 Decrypting USB Memory Sticks Encrypted with SecureDoc (RME and RMCE Methods)

Issue:

Users are unable to determine how to decrypt USB memory sticks encrypted using SecureDoc, specifically with Removable Media Encryption (RME) or Removable Media Container Encryption (RMCE). Questions include whether decryption is possible only on the original device or on other devices, and what steps are required.

Cause:

The decryption process depends on the encryption method used:

• For RME, the USB drive is encrypted with a device-specific key, typically allowing decryption only on the original SecureDoc client unless the encryption key is shared.

• For RMCE, the method does not support decryption; the only way to remove encryption is to format the USB drive.

Resolution:

For RME-Encrypted USB Memory Sticks:

To decrypt on the original SecureDoc client device:

1. Insert the USB memory stick into the SecureDoc client device that performed the encryption.

2. Click the SecureDoc icon on the taskbar, launch the SecureDoc Control Center, and log in.

3. Select the [Encryption Management] menu.

4. Select the encrypted USB memory stick from the right screen.

5. Select [Decrypt] from the [Operation] options at the bottom.

6. Click [Start].

To decrypt on a different SecureDoc client device:

• This is only possible if the encryption key from the original device is available on the other device (e.g., via profile configuration or manual key addition).

• The steps are as follows:

  1. In the SES Console, locate the target device to which the key should be added.

  2. Under Device keys, use the Add button to search for the original device’s key.

  3. Check the box labeled "Display items from all Folders" to show all keys.

  4. Highlight the required key and click OK.

  5. Ensure both the original and target device keys are listed under available device keys.

  6. Make the target device communicate with the management server to receive the new key, then reboot the system.

  7. Insert the USB memory stick into the target device.

  8. Launch SecureDoc Control Center and log in.

  9. Select the [Encryption Management] menu.

  10. Select the encrypted USB memory stick.

  11. Select [Decrypt] from the [Operation] options.

  12. Select the appropriate key in the Key selection menu.

  13. Click [Start].

For RMCE-Encrypted USB Memory Sticks:

• There is no decryption function for RMCE-encrypted USB drives.

• To remove encryption, format the USB drive. This will erase all data, including any hidden system files that may retain encryption.

Note: Adding another system’s encryption key to a device should only be done for recovery purposes and is not recommended as standard practice.