Configuring desktop collection settings

Enable or disable desktop collection, configure upgrade settings for the desktop client, and enable decryption of files encrypted with the Windows Encrypting File System (EFS).

1. Go to Administration > Configuration > Application > Desktop settings.
2. Enable or disable desktop services.
   By default, desktop services are enabled. If you change the setting, click Apply to have the changes take effect. Disabling the desktop services does not uninstall the desktop client from any user workstation.
3. Configure upgrade settings for the desktop clients registered with this data server.
   You can choose between automatic and manual upgrades. In the Upgrades
   1. For automatic upgrades, select Upgrade all workstations from the Automatic upgrades options.
      The default setting is Upgrades disabled, which means any upgrades must be done manually.
   2. Select how new versions of the desktop client are made available for download. The currently published version (the version currently available for download) is listed next to the Available versions option. Select one of these options:
      • If you want to publish a new version manually, select Manually publish new version and also select a version.
      • If you want always the latest version to be automatically available for download, select Automatically publish the latest version.

      The latest client version is not necessarily the same as the currently published version. The latest client version available is listed under Available versions. If you need the latest client, you might need to publish, download, and install a newer client version.

   3. To publish the new version (make it available for download), click Apply.
      Publishing a newer client version results in the permanent removal of all older versions. Therefore, do not publish a new version unless you are certain that the old client version is no longer needed.
4. To enable decryption of files saved in the Encrypting Files System (EFS), install a domain recovery agent certificate or a user credential certificate.
   1. In the Encrypting File System recovery agent users, click Add Encrypting File System user
   2. In the dialog box, provide the following information:
      • Select a Personal Information Exchange Format (PFX) file to upload. Click browse to navigate to the file that you want to upload.
      • Enter the password that protects the .PFX file.
      • Enter the user name of the EFS user to whom this recovery agent belongs. The user name must be a SAM compatible/NT4 Domain name-style user name, for example, MYCOMPANY\esideways.

        If the computer is not part of a domain and is running any version of Windows earlier than 7.0, the user name must be the user name. If the computer is not part of a domain and is running Windows 7.0 or later, the user name must be the name of the PC and the domain.

      • Enter the password for the EFS user.
      • Enter a description.
      • Click OK.
      The file is uploaded and the user is added to the list of recovery agent users. At any time, you can edit or delete a user's entry.
   3. Have those users for whom you installed certificates restart IBM® StoredIQ® Desktop Data Collector before you start harvesting.