File store encryption

Administrators can encrypt file stores from the Output Manager Console. File store encryption uses the Windows Encrypting File Service (EFS) and is only supported on New Technology File System (NTFS) file systems.

When you add a file store, the default state is not encrypted. If you encrypt a file store, only new files and subfolders are encrypted, and existing files and subfolders remain unencrypted. These rules apply when you decrypt a file store, only encrypted files and subfolders remain in the same state, and new files and folders are not encrypted.

If you encrypt and decrypt the same file store multiple times, the files and subfolders will be in a mixed state. Consider keeping the file store encrypted or unencrypted to avoid any potential confusion.

Before encrypting a file store, review the following information:

• Only file stores that are physically located on the server or the workstation can be encrypted by an Output Manager service, such as DBM, Output Service, or Input Service.
• The services can be on different servers, but the file store must be hosted by a server running one of these services.
• An Output Manager service using a file store hosted by another Output Manager server cannot encrypt or decrypt the file store.
• If Output Manager services are sharing an encrypted file store, these services must be running the same service or user account as the service encrypting the file store.
• Only the same user account that encrypted the file store can decrypt the file store.