Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.futurex.com/llms.txt

Use this file to discover all available pages before exploring further.

The File Encryption Agent GUI enables you to use a lightweight application to configure the agent on a single server. The changes made in the GUI are saved to a configuration file used by the file encryption agent, which runs either as a standalone application on Windows or Linux, or as a Windows service. Summary of File Encryption Agent configuration:
  • Servers: Settings that define connection details for the remote KMES Series 3 servers that handle cryptographic key management.
  • TLS: Settings and files related to mutual authentication with the remote KMES Series 3 servers that handle cryptographic key management.
  • Auth: Settings for authentication credentials with the remote KMES Series 3 servers.
  • Logging: Settings related to the logs generated by the File Encryption Agent including their verbosity, file size, location, and more.
The File Encryption Agent GUI is not a required component of the file encryption functionality. Administrators can also configure the agent by manually editing a configuration text file. You can find more details about the configuration file in the File Encryption Agent Configuration Reference section of this administrative guide.

​
Access the File Encryption Agent GUI

To access the File Encryption Agent GUI, perform the following steps:
1
Locate and run fenca-gui.exe, which is contained in the main fenca directory. This location is defined during the installation process.
2
In the Futurex File Encryption GUI, select [ Configure ] to open the configuration menu. Until you complete this step the first time, no remote KMES Series 3 servers appear in the Server drop-down list.
3
In the Servers tab, configure the KMES devices used to encrypt files.
4
In the TLS tab, define the PKI parameters for the TLS connection to the KMES device.
5
In the Auth tab, configure authentication parameters for connecting to the KMES device.
6
In the Log tab, configure where and how the agent and GUI save application logs.
7
Select [ Save ] when finished to save the configuration changes to the fenca.cfg file.

​
View File Encryption profiles

If you configured the agent correctly, the main File Encryption Agent GUI window should indicate successful connection and authentication to the KMES Series 3. On the KMES, the value in the Profiles field indicates that the authenticated identity has permission to view one or more managed profiles. Selecting View shows information about the selected File Encryption Profile, which the agent pulls from the KMES.
You cannot modify File Encryption Profiles from the File Encryption GUI. Instead, you must modify them from the KMES Series 3 application interface.

​
Use the File Encryption Agent GUI

To manually encrypt files using the File Encryption Agent GUI, perform the following steps.
1
Locate and run fenca-gui.exe, which is contained in the main fenca directory. This location is defined during the installation steps.
2
In the Futurex File Encryption GUI, select [ Open File ] at the bottom of the window.
3
In the File Details window, select [ Browse ] to locate and select the file to be encrypted.
4
Define a Name for the file in the encrypted file header. Note that this is different from the file name.
5
Select either HSM or Application as the Key Mode.HSM corresponds with File Encryption v1 keys, and Application corresponds with File Encryption v2 keys.
If the identity does not have access to any File Encryption Profiles that use File Encryption v1 keys, the system returns an error if the user selects the HSM radio button. If the identity does not have access to any File Encryption Profiles that use File Encryption v2 keys, the system returns an error if the user selects the Application radio button.
6
The Profile Key drop-down list automatically populates with all the keys the identity has access to. The keys are represented as the input directory configured for the File Encryption Profile that the key is used with.
7
Use the up and down arrows to define the file version. You can use this to manually set the version. In contrast, files placed directly into the File Encryption Agent input directory have their version automatically created based on files already in the output folder.
8
Select [ Encrypt ], choose a location to save the encrypted file, and select [ Save ].
A message confirms that the file has been successfully encrypted.
9
When prompted about deleting the original file, select [ Yes ] or [ No ].

​
Update methods

When a new version of the File Encryption Agent is released, it is typically packaged along with a new application version of the KMES Series 3. Similar to initial deployment, the end user can distribute this agent by using their normal OS file management infrastructure.