File decryption methods

we support the following methods for decrypting files file encryption agent gui futurex command line interface (fxcli) in addition to having the required file encryption permissions, you must grant identities the use permission on the file encryption profile that performs decryption operations if you configured the file encryption profile for decryption with a file encryption v1 key, you must authenticate with a hardened identity with use permissions on the key you can use the default admin1 and admin2 identities select one of the following methods and perform the instructions file encryption agent gui to decrypt files by using the file encryption agent gui, perform the following steps locate and run fenca gui exe , which is contained in the main fenca directory the installation process defines this location in the futurex file encryption gui, select \[ open file ] at the bottom of the window in the file details window, select \[ browse ] to locate and select the file to decrypt after all the fields are pulled automatically from the file header, verify the check digits of the file encryption key used to decrypt the file and select \[ decrypt ] then, choose a location to save the decrypted file and select \[ save ] when a message confirms that the file has been successfully decrypted, select \[ ok ] {{futurex}} command line interface (fxcli) to decrypt files using the fxcli , perform the following steps locate and run fxcli kmes exe , which is inside the bin directory in the main fxcl directory this location is defined during the installation process in fxcli, run the following tls commands to configure the same tls certificates configured in the file encryption gui fxcli $ tls pki file c \fenca\tls\file encryption agent p12 password file password $ tls ca file c \fenca\tls\root ca cert pem connect to the {{k3}} fxcli $ connect connect 10 0 5 40 2001 log in to the {{k3}} with the same identity used for the file encryption agent in the previous section fxcli $ login user username fileencryptionagent password identity password you must configure the password authentication mechanism for the fileencryptionagent identity to log in with a password by using the preceding command list the name and uuid of all file encryption profiles that the fileencryptionagent identity can access fxcli $ file protect list found 1 file encryption profiles result status success statuscode 0 profiles \ name "file encryption agent" uuid "{0157ad66 9c66 0001 001a 35fa039c55ee}" decrypt an encrypted file fxcli $ file protect decrypt file c \fenca\test enc out c \fenca\test txt local profile "{0157ad66 9c66 0001 001a 35fa039c55ee}" the local flag is optional for file encryption v1 keys but required for file encryption v2 keys the local flag makes fxcli pull keys and encrypt locally instead of sending the file to the {{k}} to be encrypted fxcli determines which file encryption profile to use for decryption by referencing the uuid you provide in the profile flag