Yes, you can secure files and folders on the network.
Note: When securing large folders it will allocate a lot of memory that may slow down your computer for a brief period.
To open the email you must download the free Secured eMail Reader.
When opening a secured email, the system searches the archive folder for a copy of the secured email. If no copy is found and only the original exists, the system will prompt for the Shared Secret (the password used when you established this secured channel). If the secured channel exists, the system will automatically find the right key and open the email.
To read a secured email, you must have Secured eMail, Secured eMail Reader, or the Reader Lite. The free Reader can be downloaded here.
The email recipient will receive a mail with the subject: "This is a secured email from [sender’s name]".
The receiver will need to download the free Secured eMail Reader. If the recipient has any of the
fully supported email clients, the Reader will automatically integrate into it, allowing for the receiver to read the secured
email like normal. If the recipient does not have a supported email client, they can still open the attached .sema file, and
the email will be displayed in Internet Explorer.
This can be due to your contact deleting you from their secured contacts list. If you are encountering issues with a secured channel, we recommend that both parties delete each other from the secured contacts list and establish a new secure channel.
The shared secret is a password that allows you and your contact to create a safe communication channel. These channels are created by adding a new contact to your secured contacts list. The recipient has to enter the shared secret only once, when they receive the first secured email from you.
The shared secret is what you communicate with your recipient to create a safe channel. Your Private Password is used to access any mails that have been archived encrypted and to lock certain functions within the software.
You can secure almost any USB stick on the market however some sticks contain pre-installed software which may cause a conflict. If you encounter a problem please contact Cryptzone support.
No, you can choose to secure only part of the stick. Go to settings - select Secured eUSB and click "Allow unsecured data to be stored on the USB device". You will need to do this before securing the device.
Yes, but if you want to secure USB flash devices that are larger than 4GB you have to format the device with the NTFS file system as FAT32 is limited to 4GB. This is limitation in the FAT filesystem, not in Secured eUSB.
This setting is only valid if you choose to not encrypt the entire USB flash drive. You will then be asked if you want to secure the existing content or not.
If you choose to encrypt the entire USB flash drive, all files currently on the drive will automatically be encrypted.
The client will be validated to the SEM license centre within 24 hours. If there is no connection after 20 days the
license will turn into a limited version. The next time you go online to validate, the client will automatically turn back
to the full version.
In the Enterprise Offline version all clients validate only to an internal Enterprise server. This does not need outgoing
communication to the SEM license centre.
The most common reason for not accepting the key is that you have used a different email address from when you purchased the software to when you filled in the registration form. Use the same email address and matching product registration code, if this does not work contact support. Please email your license key and user details to support@cryptzone.com
It is possible to re-use the license key and the license information on a new computer where Cryptzone SEP Client has been installed. It is also possible to move the archived sema file copies to a new computer. The secured contacts, you will have to re-establish, on the new computer. This means you can not move the entire system with all secured contacts included (Secured eMail), from one computer to another, but it is possible to start using Cryptzone SEP Client on a new computer using the old license information. It is also possible to open all old secured emails without shared secret, when the sema-file copies have been moved to the new computer.
When installing the software please ensure that your email client is closed. Sometimes it does not close entirely if you have devices like a mobile phone or a PDA connected to it. To solve this, restart you computer, close or remove applications that have contact with your email client and reinstall the SEP Client. If this does not solve the issue, please contact support@cryptzone.com
Open up the Monitor, click Settings. In the dialog box that appears, right-click the top left corner and a menu will
drop down with "About Secured eMail v??). This is the version of your software.
Or:
Open the Secured eMail Reader (Start > Programs > Secured eMail > Secured eMail Reader), and click Settings.
In the dialog box that appears, right-click the top left corner and a menu will drop down with "About Secured eMail v??).
This is the version of your software.
Yes, you can.
Yes, go to Settings, select "My Custom Texts" and click "Edit Wrapmail". Now you can add your own text, insert graphics and edit the Subject text.
You can simply sign out when you want to disable the monitor. It is also possible to disable it by opening Windows Task Manager, go to Processes, select Secured_eMail_Application_Monitor and click End Process.
The Monitor Icon shows that your software is active. When signed out and if you have a password requirement to access the
system, it prevents others from reading your secured email.
The Monitor is always disabled when you turn on your computer so that will take less time for the computer to start. When
you use your Secured eMail product, it will trigger the Monitor and activate the Secured eMail software.
From the Monitor you can easily access Settings, Help and more. You can always sign out when you don’t need to use it.
You can only recover if you have the encrypted files stored on a server or other backup location. All you need to do is
reinstall the software with the same Master Password, Private Password or Custom Password and configuration as before.
If you had the Recovery Password function configured in Enterprise Server, you can use this to access your files. When you
open a secured file you will receive a ticket which you send to your administrator and they will in turn send you a recovery
password.
Important note Secured eMails: Secured emails (.sema files) cannot be accessed if you don’t remember the
shared secret. Due to security, originals can only be opened with the same shared secret that was used to encrypt it. You will
also need to re-establish new shared secret with your recipients.
You need to make backup of your files before formatting, contact Secured eMail support for help on how to do this.
You should do a backup of the system before you transfer your data across. Contact Secured eMail support for help on how to do this.
All you need to do is restart the Server. Click on the Server Icon and click restart.
Restart the Server and use the Admin Tool to see the status of the server.
Check the database settings and restart the server.
Restart the Enterprise Server and restart the Mail Server.
Restart the Enterprise server and check that all Mail Server services are running. All services that are set on auto should be started.
If you have a backup you can access encrypted eFiles, eFolders or eUSB. All you need to do is reinstall the software with
the same Master Password, Private Password or Custom Password and configuration as before.
If you had the Recovery Password function configured in Enterprise Server, you can use this to access your files. When you
open a secured file you will receive a ticket which you send to your administrator and they will in turn send you a recovery
password.
Secured emails can always be opened by using the original Shared Secret used for creating them. In order for the
possibility to add the Shared Secret, the secured contact must be deleted from the contact list. If a .sema copy
remains in the archive location, a secured email can be opened without the Shared Secret.
Using the Enterprise solution, clients receive the Shared Secret from the server when opening emails from other domain
users.
Archived .sema copies can be opened from their archive location, if these are saved secured, you will need to be aware of
the unlocking password.
You can purchase a license from our sales team who will direct you to where you can download the Secured eControl system. You can then start using the system together with Secured eMail.
To reset the Private Password you need to access the Admin Lock on the Client software.
Contact Secured eMail support for MSI files.
There can be many reasons for this as different companies have different configurations, but most common cause is some
data could not be synchronized with the Enterprise Server.
The Server reads data using the default configuration. Contact Secured eMail support and describe
your problem and we will help you.
Yes, Secured eMail can be installed to selected profiles or to all profiles.
Most common configuration is port number 443 using the HTTPS protocol. Only outgoing traffic is allowed from the Enterprise
server.
Note: The Enterprise server listens to a user defined internal port; by default port number 8888 is used.
During installation you can specify your own IP address and port number, by default it uses 127.0.0.1 and port 8888. This can be easily changed after installation in the Admin Tool.
The installation of Secured eMail for Lotus Notes / Domino consists of two parts:
Yes, it is. The installation procedure is same for all Cryptzone products. When you want to add other products to your license, contact Secured eMail sales. Then when registering the new product, the license server will provide you with your new product and upgrade the license key.
Yes, it is. The installation procedure is same for all Secured eMail products. When you want to add other products to your license, contact Secured eMail sales. Then when registering the new product, the license server will provide you with your new product and upgrade the license key.
Yes, you can deploy Secured eMail to several profiles on same network. During installation of Secured eMail, make sure that you select to use multi user profile and tick in the box.
The installation of Secured eMail for Lotus Notes / Domino consists of two parts:
Yes, you can deploy Secured eMail to several profiles on same network. During installation of Secured eMail, makes sure that you select to install to all users.
The SKG (Symmetric Key Generator) is a unique patented solution for Secured eMail. The SKG System uses symmetric encryption in combination with several encryption algorithms; AES, SHA-1, and SHA-2. The system uses very strong encryption key protection, delivered in a user-friendly application for secured encryption and decryption.
The SKG system generates a onetime dynamic session key that can synchronize at both ends. The system uses the secure
HASH algorithm called SHA-1, to create identical 160-bit keys in physically separated locations. Then the SKG key, in
combination with SHA-2, scrambles with a static seed to establish a secure channel between sender and receiver. This
unique method of creating keys means that no key information is sent. When the key has decrypted the message, file, or
folder; it will be removed from memory and dumped again using SHA-2.
Each node is given the same condition (seed) and its own unique Id (SID) which is then sent and shared with the other party.
It is then possible to generate exactly the same condition on each side.
System SKG has the ability to create synchronously identical 160-bit keys at nodes with SHA-1. Once system SKG is set up;
the nodes generate new keys on demand, never using old keys. In the Secured eMail system; the seed is the shared secret.
AES stands for Advanced Encryption Standard. The block cipher is a symmetric key cipher which operates on fixed length group of bits (blocks). It can process data blocks in bits and 256 bits are unbreakable. AES is adopted by U.S Government as an encryption standard.
No, we do not use PKI
Secured eMail offers a patented data security solution based on the Simple Encryption Platform (SEP) that provides high security and flexibility, which is scalable for any business. The products available are:
Historically, IT security has been focusing on addressing external threats by using virus detection, firewall, anti-spam and anti-spyware, however as organizations grow globally so does the need for information security to protect against internal threats. From this the term O.C.C. – Outbound Content Compliance was created. A solution providing the monitoring, encryption, filtering and blocking of outbound content by email, instant messaging, peer-to-peer, web posting and other types of messaging traffic.
The O.C.C requires protection against the following:
To edit your details please send a mail to support@cryptzone.com. Please do not forget to include your license key and new user details.
Since Secured eMail is compliant to HIPAA, GLB, SOX and most the of Government recommendations in many western countries, many branches use our software to secure their systems. These include healthcare, financial institutes, Government, Law Firms and any business and industry as well as private users who want to protect their personal integrity.
The .sema file is the IANA registered file for a secured email. All secured email is attached with an encrypted .sema file. You can open secured emails if you have Secured eMail or the Secured eMail Reader installed on your system. The free Secured eMail Reader is available from here.
When a secured email is opened or sent, a copy of the original encrypted .sema file will be created. The .sema copy will be placed in the folder "My secured eMail" under My Documents or a user-defined archive location. Each time you open a secured email the system will look for the .sema file copy.
A Multi License means one license key can be used for more than one user. Using a Secured eMail Enterprise product (implies multi license), you may exchange users to re-use license quotas.
A single license key is only valid for one desktop user. This key cannot be registered to other users name or email.
To retrieve a lost license key, click on the "Lost License Key" section on the Support page.
Important Note: If you are using a version older than 2.2, you will need to enter the email address that was
used to register the product. Secured eMail will send the most recent license key to the email address entered.
The most common reason for not accepting the key is that you have used a different email address from when you purchased the software to when you filled in the registration form. Use the same email address and matching product registration code, if that does not work contact support. Please email your license key and user details to support@cryptzone.com
The most common reason is the license mail has been caught by your spam filter. Some spam filters do not show leniency
towards emails containing images, which is why the license mail can end up in your spam box.
If you cannot find it in your spam box, please send an email to support, specifying the date of purchase, ordered product and
company name. The more information you supply, the faster we can help you.
support@cryptzone.com
Yes you can. Although the license key is personal, it can be connected to you as an individual and to your company at the same time. All you have to do is install Secured eMail on the computers where you wish to use it and apply the same key and registration information. Your Secured eMail will now work on all machines simultaneously.
In an internal encrypted database.
Yes, but only if you have an enterprise key or a client with a multi license.
Enterprise Users: When the client registers, it will connect to the Enterprise server to receive
a unique user license.
Client Desktop users: All clients will receive a unique license when registration is successful.
The "Send Secured" button is deployed by the Administrator. Contact your administrator and check if they have added it
your user profile.
Only desktop users with no connection to Domino Server will have the button locally installed. In such case use
POP account.
You can configure the Password length and character requirements in the Settings.
Open Password – scroll down and click on <Configure Password Policy>. Here you can select the criteria for the
password requirement.
A prepaid code is similar to a shopping voucher for specific products or add-ons. If purchasing for colleagues, clients or friends and you do not have all their details to register them, it is useful to buy prepaid codes instead. The user can then go into the Secured eMail Shop and activate their license with the prepaid code.
To activate a Prepaid Code, you must go to the Secured eMail web shop at www.cryptzone.com/shop/ and click on "Prepaid Code".
In the window that appears, you will be given two choices. Either your web service will help you find the right program or you can choose a program from the list. Choose the second option and a list with programs will appear. Choose Secured eMail and press OK. The next time you double click on the email, the Secured eMail Reader will start automatically.
With the Secured eMail Reader you can read encrypted emails on any email platform including all web based email platforms.
A SEM Account is a web portal hosted by Secured eMail for Enterprise Customers and Client Multi license-users. A
logon will be created when you register the software. The SeM License Server hosts all license registration, upgrade and
activation.
Through this portal you can upgrade your license and create a database for your registration.
Note: This database is not for storage of your company profiles or data. All company or personal data will
be stored on your own location in a SQL Database.
Enterprise User:
The Enterprise administrator can use the Enterprise Zone to upgrade their license and to create a customer database.
Client Desktop with multi license:
The administrator can use the Open Zone for license activation and upgrade. Here they can see registered client users
and can activate the products for them.
Contact Secured eMail Support by email or phone and have your license number, order number or customer number available. Login details will be sent to the registered email owner of the account.
If the license server is down, the Client will still have full functionality for 24 hours.
The Enterprise Server will still work online for at least 12 hours, this does not affect performance of the Servers but
you need to wait with license registration. This does not affect the Offline version.
No they cannot. The Secured eMail extension, .sema, is an internationally authorized extension. If a secured email is stopped you will get a notification saying "This email has been stopped. Do you wish to authorize this email and all similar emails in the future?" You can then decide how you would like to handle secured emails in the future.
No. As Secured eMail is an add-in for your email client, it is integrated seamlessly into the system and therefore it will not be stopped by your anti-virus program.
That depends on the virus scanner software. If it would block secured emails, the user will receive an email informing them that the email has been blocked. The anti-virus program will ask the user if they wish to unblock the encrypted email and by accepting this, any future emails will be accepted. Furthermore, the .sema file extension is registered with the worldwide internet authorities as well as with anti-virus and anti-spam companies. This means that the .sema file will be accepted by many different software products.
Yes, they are. When opening a mail in Outlook by double-clicking it, a temporary copy is created which is treated in the same way as a normal incoming mail and therefore will be scanned. The same applies for outgoing emails.
One of the reasons is to keep your data safe and intact. If server goes down, you still have your data safely stored within the database. To bring the system back online, all you need to do is reinstall the Enterprise server and re-connect the database to the server.
Only customers who have purchased a support agreement are entitled for the service. All incoming support questions are accepted and dealt by the Secured eMail support team.
Support provides immediate response to phone calls and reply within 3 hours via email during office hours,
8:30 - 17:30 Swedish time. You can also organize an appointment for support by phone, outside of business hours.
There is installation support over the phone, email and a web based demo service.
Maintenance entitles you for free upgrades and updates during the purchased time.
Contact our sales department or the support team.
The software requires Microsoft® Internet Explorer 6.0 or later.
Microsoft® Outlook® 2000 or later and Lotus Notes™ 6.0 or later.
No, Secured eMail will automatically detect any email accounts in your email client and add them into your "My Accounts" list.
No, currently Secured eMail does not support Vista.
Full support for Microsoft Outlook 2007 is under development. However, Secured eMail does work on some systems running Outlook 2007, but the "Send secured" button will be in the Add-ins ribbon.
Yes, it is possible.
The Shared Secret is not stored. It is only used as an Initiating Seed, which is regarded as a digital stamp. The seed is stored in a database (Database A) belonging to System SKG. Database A is encrypted with a randomly generated 256 bit key, which is stored in a second database belonging to Secured eMail (Database B). This is encrypted with a randomly generated 256 bit key, along with AES, and an additional static key. The static key is encrypted with AES and a 256 bit key generated from the private password. The private password is stored in Database B.
The private password is stored in a database belonging to Secured eMail (Database B). Database B is encrypted with a randomly generated 256 bit key, AES and an additional static key. This key is encrypted with AES and a 256 bit key, originating from the private password. To access it, the user must enter a password that is transformed to a 256 bit key. The key is stored encrypted with AES in the memory during the session. On every access/session Database B or parts of it is encrypted with new keys.
Everything is stored in two ways:
Unsecured System:
The private password is stored in an encrypted database (Database A). A is encrypted with AES (Rijndael) using a static 256 bit key (B). B is stored in the binaries included in the installation.
Secured System:
The private password is stored in an encrypted database (Database A). A is encrypted with AES (Rijndael) using a static 256 bit key (B). B is stored in the binaries included in the installation. Database A is furthermore encrypted via AES (Rijndael) using a strong, random 256 bit key and "C". C is in turn encrypted via AES (Rijndael) with a 256 bit key and "D". D is a hashed version (via SHA256) of the private password of the user.
Logging On:
After logging on to Secured eMail, the private password is hashed and encrypted in memory to be used during the session when needed. Encryption is done via AES (Rijndael) with a randomly created key and "A", which is unique for every session. A is stored together with the encrypted password in the Page file, shared by all processes in the system.
Logging Out:
After logging out of the system, all keys that are stored in the memory are destroyed.
Contact any sales person at Cryptzone for the Enterprise Trial.
Normally the trial period is 1 month, however longer trials are available when needed.
If you want to remove the entire Enterprise system, it is recommended that you remove first the Client, then the Admin Tool and finally the Server.
Yes, if you have a client desktop version you may upgrade for free. However if you want to add Secured eFile or Secured eUSB you will need to purchase a new license key. Contact our sales department to do this.
The upgrade is only valid for the Secured eMail client, if you want to upgrade with a new product at the same time, you will need to contact support and inform them to add the Secured eMail client upgrade to the license.
From within the Admin Tool, click Tools from the top menu and select create upgrade installer. From here you can create an upgrade installer with appropriate profile for the clients.
Currently Secured eDisk Protect is not completely integrated in the SEP platform, that means it cannot be managed from the Cryptzone Management Console, but has ist own central management via AD or ADAM. Secured eDisk Protect is a coorporation with our partner Safenet. Its full integration into the SEP platform is planned for future releases.