http://xcoredisk.oxysec.com/manual/menu-main/menu-device
xCoreDisk Application

xCoreDisk Application (Rel. 2)


 Device menu

    Clicking on the "Device" menu will open the submenu shown below.

    NOTE - If the disk is in use, all the options will be inactive: disable the disk to use the commands related to the device.



Initialize device

    Device initialization process is an operation that is performed only once, when the device is still virgin. At the user level, this process takes the form of setting the activation password while, in more detail, encryption keys are generated inside the device that make each xCoreDisk different from any other.

    Clicking on this menu item opens the following dialog box inviting you to create the new device password:

    This password is the one that will be later requested to activate the disks and for all operations that require access to the device itself. It can obviously be changed at any time but must always be chosen with great care.


   The choice of password

    The choice of the password is in general an aspect overlooked by the end user, even though it is the password that constitutes the last security stronghold of the user's data.

    This is certainly not the place to deal with the issue in depth, but we want to underline some of the key aspects to keep in mind in the selection process.

  • avoid passwords that contain personal data (dates, names ...) or that can lead back to your preferences (favorite authors ..., places of holiday in which you have been ...)
  • use long passwords that possibly contain uppercase, lowercase, numbers and special characters (such as !, ?, &, #...)


    Once selected and entered in the two fields of the dialogue, press "OK": the dialogue will close and the device will be immediately initialized with the password indicated.


      RW Password and RO Password

    The device allows to memorize two distinct passwords, the RW Password (Read/Write) and the Password RO (Read Only). In the initialization phase, the user is asked to choose the RW Password while the Password RO is simply set identical to the RW password.


    NOTE - It is also possible to assign a name to the device in the case in which it is necessary to distinguish between different devices. The name can also be changed at any time.


Change password

    This command opens a window that allows you to change both the Read/Write disk password and the read-only password.


      RW Password and RO Password

    The Read/Write Password (RW) and the Read Only Password (RO) are set identical during initialization but later the user can choose to change only one or the other.

    You can choose which password to change by using the read-only password check.



Device backup

    An initialized fly the xCoreDisk device contains a series of information and cryptographic keys that have been generated internally and which are not normally exportable.

     In case of breakage or loss of the device it would be impossible to recover your data as the encryption keys of the functional parameters and of the disks exist only inside the device.

     For this reason a backup command has been provided that allows to extract, in an encrypted form, all the data that will then allow to recreate a device capable of working with the previously created encrypted disks.

     By executing this command, the following window opens:


    First enter the device password, then click on "Browse..." and select the name of the file where the backup data will be saved.

     Insert and then repeat the Backup password (possibly different from all other passwords) that constitutes the password to protect the data that will be saved and click on "OK".


      Backup password

    Saving the operating parameters of the xCoreDisk device, including the secret keys of encryption generated internally, is a delicate operation as this data, if they were to fall into the hands of some malicious, could allow the latter to access the encrypted disks created in priority.

    For this reason, the backup data is encrypted with an AES key generated starting from a new password, the Backup password in fact, which serves only and exclusively to protect the backup data from unauthorized use..


    NOTE - The file generated by the backup function is of type * .txt and the content is printable; it is therefore possible to keep this data even in the paper format only and recreate the file only when necessary.


Device restore

    Restoring a device allows to initialize a virgin device with encryption parameters identical to those of another device that has been previously backed up.

    Selecting the menu "Restore device" the following window will appear.

    The dialogue asks to enter the Backup password, that is the one chosen during the backup phase of the device: this password will allow the device to decrypt the configuration data and store it.

     It is also asked to set the main password of the new device: in fact, the restore operation can only take place on virgin xCoreDisk devices that do not yet have the main password which must then be configured.

     Choose "OK" to complete the operation.

Backup disable

    The backup and restore operation can obviously be used to create clones of a device, useful for ex. to allow collaborators to access, perhaps read-only, shared virtual disks, e.g. located in the cloud.

    In order to prevent unauthorized persons from creating additional clones of the device, the backup functions can be permanently disabled by selecting the "Disable backup" menu.

    The window shown will appear that will guide the user in disabling this feature.


      Disabling the backup

    Disabling the backup feature is permanent: once the function that allows saving the configuration data of the device is disabled, it will no longer be available.

    It will no longer be possible to create the file that allows you to generate clones of the original xCoreDisk device.

    We strongly recommend that you disable the backup only after doing this and save the generated file in a safe place.

Device name

    This menu allows you to assign or change the name of the device.

    You can assign a name up to 16 characters in length, a name that can be changed at any time.

     NOTE - The purpose of this name is to be able to distinguish between a device and another in case you have more than one.

Licenses

    Clicking on this item the dialogue shown below appears:


    
Information regarding licenses and support deadlines are reported in this dialogue:
  • Device name - Name assigned to the device
  • Firmware version - Version number of the device firmware
  • OxySec license expiration - Device license expiration date beyond which the device stops working (assigned by OxySec)
  • User license expiration - Expiry date of the user beyond which the device stops working (assigned by OxySec)
  • Firmware support expiration - Firmware released beyond this date can not be placed on the device
  • Application support expiration - An application released after this date will not work with this device
  • Serial number - Univocal serial of the device to be supplied to OxySec for updating expiry dates

    NOTE - This information is the same as appears in the open dialog via the "Information" menu (see specific paragraph)

     By clicking on the "Update" button, the application takes online any new license expiry dates and support for this specific device.