Skip to main content
Matrix42 Self-Service Help Center

PSEnc

PSEnc

This command line utility is used to batch-encrypt plain PBA policies to encrypted PBA policies and save them to a specific location.

Usage

  • Batch-decryption of encrypted PBA/FDE policies. The decrypt function requires the administrator password in the encrypted policies.
  • Command line utility or GUI application.
PSEnc –f <source> -t <target> -p <password> [-d] [-s] [-b] [-h] [-n]
  • The following parameters are available:
Parameter Details

-f

Indicator followed by source PBA policy file or directory to be encrypted.

<Source>

Name of the source policy file or directory to be encrypted.

-t

Indicator followed by target directory to store the encrypted policy/policies.

<Encrypted>

Name of the target directory to store the encrypted policy/policies.

-p

Indicator followed by encryption password.

<Password>

Encryption password.

[-d]

Indicates decryption of the encrypted PBA policy file. Supported only in Command line mode.

If this option is provided:

-f indicates encrypted PBA policy file;

-t indicates directory to save encrypted/decrypted PBA policy file(s).

[-s]

Silent mode, without GUI.

[-b]

Batch processing indicator.

[-h]

Display the parameters listed here in the command prompt.

[-n]

Indicates switch to FDE policy mode (to encrypt/decrypt FDE policies). Supported only in Command line mode.

Examples

  • Example 1: Encrypt a plain PBA policy file located at C:\plain.pba and save it to D:\. The password is set to 12345678:
psenc -f c:\plain.pba -t D:\ -p 12345678
  • Example 2: Perform the same as in example 1 in silent mode:
psenc -f c:\plain.pba -t D:\ -p 12345678 -s
  • Example 3: Encrypt all the plain PBA policy files in directory C:\policies and save the encrypted files to the directory d:\policies. The password is set to 12345678:
psenc -f c:\policies -t D:\policies -p 12345678 -s –b
  • Example 4: Decrypt encrypted PBA policy file c:\encrypt.pba and save it to D: \. The password is set to 12345678
Psenc –d –f c:\ encrypted.pba –t D:\ -p 12345678
  • Example 5: Decrypt the encrypted FDE policy file C:\encrypted.nbs and save it into D:\. The password is 12345678.
psenc -d -f C:\encrypted.nbs -t D:\ -p 12345678 –n

Specific example

  • Example 1: provide single file mode in source option, after processing copy it into target directory.
  • Decrypt PBA Policy
psenc -d -s -f D:\encpolicies\PBA\t1.pba -t D:\target –p 12345678
  • Decrypt FDE policy
psenc -n -d -s -f D:\encpolicies\FDE\fe1.nbs -t D:\target -p 12345678
  • Example 2: Batch mode -provide files in source directory, after processing copy it into target directory.
  • Decrypt PBA Policy
psenc -d -s -f D:\encpolicies\PBA1\ -t D:\target -b –p 12345678
  • Decrypt FDE policy
psenc -n -d -s -f D:\encpolicies\FDE\ -t D:\target -b –p 12345678
  • Was this article helpful?