Unable to gain transparent access to a USB device inside an encrypted Removable Media container

Technical Articles ID: KB86722
Last Modified: 12/23/2021

Environment

McAfee File and Removable Media (FRP) 5.x

For details of FRP supported environments, see KB81149.

Problem

You are unable to access the FRP-encrypted container on a USB device after you log on to Windows without first manually entering the key password.

After you log on to Windows, and based on the encryption policy, the encryption keys are expected to be unlocked. The user expects to seamlessly access the encrypted container on the FRP-managed USB device, because the USB devise is unlocked automatically.

You gain access to the encrypted container is only when you:

Enter the FRP password key when prompted by the FRP client.
Or
Click the McAfee icon in the Windows notification area and unlock the key by entering the password.

Cause

This issue has been identified as a problem with the configuration. The policy option Windows Logon under the Unlock Triggers section has not been selected.

The Unlock Triggers a policy that specifies conditions at which users get prompted to authenticate, and encryption keys get loaded.

The section has the following three options:

Windows logon - If there are any keys associated with Password token, an authentication prompt is shown to users immediately after Windows logon. If there are any keys associated with operating system token, the tokens get loaded (if available) immediately following a successful operating system logon.
Encryption key access - Prompts the user to authenticate when a user-initiated action requires access to an encryption key.
McAfee tray - Enables the user to manually log on/log off to FRP using the McAfee tray Quick Settings menu.

Solution

Configure the system to allow access to the encrypted media to be transparent to the user, enable Windows Logon:

Open the FRP policy, and navigate to Policy Settings, Authentication.
Click the Encryption Key Options tab.
In the Unlock Triggers section, select Windows Logon.
Save the changes and apply the policy changes.
To perform an auto unlock action, you must also create and assign an encryption key to the user. To complete these tasks, see the FRP 5.x Product Guide (PD26185) under the sections "Create an encryption key" and "Assign an encryption key."

The user no longer has to manually enter the key password to access the encrypted USB device. Access to the USB device is seamless.

Affected Products

Configuration
File and Removable Media Protection 5.4.x
File and Removable Media Protection 5.3.x
File and Removable Media Protection 5.2.x
File and Removable Media Protection 5.1.x
File and Removable Media Protection 5.0.x (EOL)

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Portuguese Brasileiro

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Knowledge Center

Unable to gain transparent access to a USB device inside an encrypted Removable Media container

Environment

Problem

Cause

Solution

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Knowledge Center

Unable to gain transparent access to a USB device inside an encrypted Removable Media container

Environment

Problem

Cause

Solution

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title