1) The user copying files from the nonencrypted folders to the encrypted folders need to have read access on the nonencrypted files and write access to the encryption zone and need to be able to decrypt EEK. 2) A zone can contain files for groups of users or a single user, key release is controlled by KMS ACLS. ... View more

If you are managing groups via the underlying OS you will need to manually add the group and user mapping to a minimum of the sentry host and your client host. It is recommended to add them to all hosts to avoid permission ambiguity when running jobs. ... View more