                                  FUNCTIONS                                                                      ───────────                                                                                                                     LOCK                                                                                                                                                            Disk locking is accessed by clicking the left mouse button over the Lock        block, or hitting the L key on the keyboard.  Locking prevents a disk's         contents from being viewed, edited, deleted, or even listed by any DOS command  or application.  You will be asked for a locking password which cannot exceed   twelve characters in length, and is case sensitive.  This means that lower      case letters (such as "abcd") are considered different than upper case ones     (such as "ABCD").  Please be aware of the status of your Caps Lock key as you   enter your password, as the characters you type will not be echoed to the       screen, but displayed as asterisks.  You will then be asked to re-enter the     password, to make sure you typed correctly the first time.                                                                                                                                          NOTE                                                                                                                        It is extremely important to remember all passwords used in PC Padlock.  If     there is any possibility of forgetting a password, you may want to write it     down somewhere in a safe place away from the computer.  Once used, there is no  way of determining PC Padlock passwords.  If you should forget one, your only   recourse is to send the floppy disk to Del Mar Software.  We will unprotect     the disk and return it to you for a ten dollar service charge.                                                                                                  After locking, you will be asked for permission to encrypt the disk.  For       disks containing large or numerous files, this may take a while, but is         absolute protection should the disk be lost or stolen. Why?  An expert data     thief with enough private time may be able to use disk repair or sector editor  utilities to bypass DOS and view raw file data.  Disk encryption ensures that   if a would-be snoop has the time, expertise, and resources to get that far,     the data he views will be indecipherable.                                                                                                                       Disk encryption may not be run on a disk that contains individually encrypted   files in the root directory (see the "Encrypt" section later in this chapter).  If it does, you will be informed that disk encryption is not possible.                                                                                                                            WARNING                                                                                                                       PC Padlock cannot, however, detect encrypted files that may exist in any        subdirectories on the disk.  Be sure none exist before you lock a disk, as the  net result of locking a disk with encrypted files in subdirectories would be    to actually decrypt the files.  These files then have the danger of being       viewed by an expert data thief as described above.                                                                                                              The entire disk will be scanned, and all active file areas are encrypted.       This may take anywhere from a few seconds for one or two small files up to      several minutes for a full high-density disk.                                                                                                                   Before this process begins, you are also asked permission to flush the disk.    In contrast, flushing takes care of all inactive file areas, and takes longer   on disks with a lot of free space.  These inactive areas contain data left      behind when a file is deleted, shortened through editing, or copied over with   a shorter file of the same name.  This abandoned data is completely destroyed,  and all evidence of it's former existence and file names is removed.  The       "undelete" command of DOS V5.x or higher, or any other third-party utility,     will not be able to recover these files.  Because of this flushing process,     you must be sure there are no deleted files you may want to undelete later.     If there are, you must undelete the files before starting disk flushing.                                                                                        As a possible time-saver, you need not run flushing during locking if you are   sure no deleted or shortened files have been added to the disk since the last   flush.  As an aid to deciding when to use flushing, check the "Deleted files"   line of the disk information area.  Be aware that you must also check any       subdirectories on the disk.  If there is just one deleted file on the disk,     you should run flushing to destroy this old data.  Be advised, however, that    although a disk may contain no deleted files, it may still contain inactive     file areas from files that were edited or copied.  When in doubt, use flushing  for maximum protection.                                                                                                                                         As the disk is encrypted and/or flushed, a meter will appear in the user        interface area to show you the completion percentage of the process.  When      done, the new disk status is displayed, and you are returned to DOS.                                                                                            UNLOCK                                                                                                                                                          You may unlock a disk by clicking the Unlock block or hitting the U key.  This  function returns a disk to it's original condition, just as if PC Padlock had   never been run.  You will be asked to enter the same password used to lock the  disk originally.  If you are successful, the disk will be unlocked and          automatically decrypted if needed.  If not, an entry will be made in the        intrusion file denoting the date, time, and drive of the failed attempt.  The   next time you run PC Padlock, you will be notified of these failed attempts.                                                                                    If you own Menu Pro and have installed PC Padlock in the same directory, these  attempts will instead go into Menu Pro's intrusion file.  They will then be     viewed the next time you run Menu Pro.                                                                                                                          After unlocking and any needed decryption, the file list and disk information   area will fill with the appropriate data, and you may work further on the disk  if desired.                                                                                                                                                     FLUSH                                                                                                                                                           This function is accessed by clicking the Flush block or hitting the F key on   the keyboard.  It operates identically to the flushing offered when locking a   disk, but is offered separately for such jobs as processing old disks.  Disks   that have been previously used may contain old data in inactive file data       areas.  If you  wish to only encrypt files already on these disks, you should   run flushing first to remove this old data.    Then individual files may be     encrypted and the disk locked, if desired (flushing during locking is then not  necessary).  This ensures no old confidential data will be discovered should    the disk be lost or stolen.                                                                                                                                     Even reformatting these used disks is no safeguard, as DOS doesn't touch the    file data area when reformatting.  When reusing an old disk, you should always  flush the disk after formatting.  This can be done either during locking or     separately.                                                                                                                                                     ENCRYPT                                                                                                                                                         Encrypt may be accessed by clicking the Encrypt block or hitting the E key on   the keyboard.  Encrypting causes a text file to become unreadable, and a        program file unexecutable.  It is safe from prying eyes until decrypted with    the correct password.                                                                                                                                           When you choose encryption, a blue bar will highlight the first file in the     file list area.  You may use the PageUp or PageDn blocks or the up and down     arrow keys on the keyboard until the desired file appears in the list.  Then,   using the mouse, you may ignore the bar and click the left button when the      cursor is over the desired file entry.  Or, using the keyboard, you may move    the bar with the Up and Down Arrow keys until the desired file is highlighted   and then hit Return.                                                                                                                                            As an alternative, you can click the Specify block at the top of the file       list, or hit the S key.  You will then be asked to enter a file name.  This     file name may contain wildcards, to allow encrypting more than one file at a    time.  For example, if you wish to encrypt all files with an extension of       ".txt", you should enter "*.txt" for the file name.  Consult your DOS manual    if you need further assistance using wildcards in file names.  As each file is  found that matches your specification, it is moved to the top of the list and   highlighted.                                                                                                                                                    If the desired file is in a subdirectory, you may change to that directory by   clicking on the ChgDir block, or hitting the C key on the keyboard.  A red bar  will appear in the file list, and you may make your selection as described      above.                                                                                                                                                          For each file processed by any of the above methods, you will be asked to       enter a password.  It cannot exceed eight characters in length, and like a      disk locking password, is case sensitive.  You are required to enter the        password again, to confirm you typed correctly the first time.                                                                                                  As the file is processed, a meter in the user interface area will inform you    of the encryption progress.  When done, the meter will disappear and the        letter "E" will appear at the end of the file's entry in the file list area.    This lets you look at the file list and instantly know which files are          encrypted.                                                                                                                                                      To stop selecting files for encryption, you may click the right mouse button    or hit the Escape key.  This will cause the blue highlight bar to disappear,    and you are then free to choose another function or quit PC Padlock.                                                                                            Note that individual file encryption does not work like disk locking - the      file may still be viewed, edited, or even deleted.  Viewing or editing will do  little good, however, as the data will be indecipherable to the user.  For      maximum protection, however, you should lock a disk to prevent file deletion.                                                                                   You may use standard DOS commands to rename, delete, or change attributes on    an encrypted file.  However, you should never copy an encrypted file.  If you   do copy one to another name or location, PC Padlock will not identify or        process the file correctly.                                                                                                                                     DECRYPT                                                                                                                                                         You select decryption by clicking the Decrypt block or hitting the D key.       When doing so, a cyan highlight bar will appear, and file selection is handled  as explained previously in the encryption section.  Entry of the correct        password causes the appearance of the progress meter and the decryption of the  file.  When done, the letter "E" disappears from the end of the file's entry    in the file list area.                                                                                                                                          You will be given two chances to input the correct password.  After that, the   program records the failed attempt and returns to DOS.  The next time you run   PC Padlock, you will be notified of all such intrusion attempts.  However, if   you have Menu Pro installed in the same directory as PC Padlock, these failed   attempts will instead be stored in Menu Pro's intrusion file.  In this case,    you will then be notified the next time you run Menu Pro.                                                                                                       PURGE                                                                                                                                                           You may purge a file by clicking on the Purge block or hitting the P keyboard   key.  File selection is handled with a brown highlight bar as described         previously.  It is the secure alternative to the DOS "delete" or "erase"        command.  When DOS deletes a file, it merely marks the space it occupied as     reusable, and flags the file so DOS ignores it.  All the file's data remains    on the disk until written over.  Purging a file destroys all this data and      completely removes all traces of the file's former existence.  It is then       marked with the letter P in the file list area.  Purged files cannot be         undeleted.                                                                                                                                                      QUIT                                                                                                                                                            You may quit PC Padlock by clicking the Quit block, or by hitting the Q key on  the keyboard.  The Escape key will also end the program.                                                                                                                                                                                                                    APPLYING PC PADLOCK                                                            ─────────────────────                                                                                                                PC Padlock's features may be used individually or combined, tailoring it's use  to your particular needs.  Here are a few suggestions :                                                                                                         MAXIMUM PROTECTION                                                                                                                                              You have a data disk which contains confidential company information - trade    secrets, formulas, patent information, software source code, or other such      proprietary data.  It is not accessed on a daily basis, and therefore stored    somewhere.  If not starting with a new, unformatted disk from the box, you      should flush the disk first.  Then, keep it locked and encrypted when not in    use, updating the flushing when any files are shortened through editing or      copying.  While in use, do not delete files from DOS, but use PC Padlock's      Purge function instead.  Your data will be totally safe.                                                                                                        MEDIUM PROTECTION                                                                                                                                               You have a disk which contains company data - projections, sales, new product   information, or other similar data.  It is accessed several times a day, but    never leaves your office.  No unauthorized personnel will have access to the    disk for extended periods during the day.  You should keep the disk locked and  encrypted overnight, with flushing as needed.  During the day while it is       being used, however, you may only opt for locking alone.                                                                                                        MINIMUM PROTECTION                                                                                                                                              You have personal data on a disk at work or home which you wish to keep         private.  It is accessed many times during the day, so you need a protection    scheme that is quick and easy.  You only wish to keep the data safe from any    casual users who may inadvertently place the disk in your drive.  In this       case, locking only should meet your needs.                                                                                                                      SPECIAL CASES                                                                                                                                                   You use a data disk that is used by others, and wish to keep your files on      that disk private.  You should individually encrypt the desired files.                                                                                          You are giving someone a test via floppy disk.  The disk contains reference     material, the test itself, and the answers.  You need to make sure the user     cannot read the file containing the answers until he has completed the test.    You should encrypt the answer file, and give the user the password to decrypt   the answers when you deem appropriate.                                                                                                                          AUTOMATIC PADLOCK                                                                                                                                               Many users will want to unlock their disk and/or decrypt files, run an          application, and re-secure the disk when done.  Instead of entering three       commands from DOS to do this, you may create a batch file to accomplish the     task.  Let's say your drive containing the data disk is the A drive, and you    normally type in "spreadsheet info.doc" to run your application.  You may       create the following batch file called "spread" with any text editor :                                                                                          padlock a:                                                                      spreadsheet info.doc                                                            padlock a:                                                                                                                                                      Now all you have to do is enter "spread" from DOS to unprotect your disk, use   your application, and secure the disk again.                                                                                                                    If the name of the data file you work on changes periodically, you may replace  the second line of the batch file with "spreadsheet %1".  This allows you to    enter "spread filename" from DOS, where "filename" is the name of the desired   data file.                                                                                                                                                      MASTER PASSWORD                                                                                                                                                 This feature is very useful in a network or large company environment, where a  system administrator must have emergency access to his employee's data.  Rest   assured that total disk security is not compromised in the least.  In brief, a  user can assign a master password to his individual computer system.  This is   called the "key".  Whenever a lock or file encryption is performed, this key    is branded on the disk.  This is called the "brand".  To unsecure a disk using  this master password, the user merely types it in when asked for an unlocking   or decryption password.  To be successful, it must match both the key and the   brand.  This means that disks secured on your system may not be unsecured on    another system, and vice versa.                                                                                                                                 To assign the master key, hit the F1 keyboard key to bring up the on-line help  screens.  Page down to the third help screen, then hold down the control        (Ctrl) key and hit the K key.  Although master password assignment is a very    secure process, it's access was hidden here to help prevent low priority users  from knowing it even exists.                                                                                                                                    You will be prompted to change the key (system) or brand (disk) master          password.  Entering K will enable you to assign a system key.  If one already   exists, you must enter the old key before continuing.  If you are successful,   you may assign a new key which will be used to brand future disks.  If you are  not successful, the attempt is logged for later user notification.  If you      simply hit Return when asked for the new key, the key will be deleted           altogether, future disks will not be branded, and the master password feature   will be inactive.  The key change feature is useful for a system administrator  who wishes to change the key frequently for security reasons.                                                                                                   Entering B will allow you to change an existing disk brand in a similar         fashion.  You cannot, however, assign a brand to a disk that has none.  This    prevents even the system administrator from trying to break into a foreign      disk by assigning it a brand to match his key.  Like key changing, a Return     may be hit when asked for the new brand, and the existing brand on the disk     will be removed.  This will make the disk immune to master password entry.      Brand changing can be an aid to the administrator who changes the system key.   For the master password scheme to continue to work, all disks branded with the  old key must be rebranded with the new key.  Also, the master password feature  may be disabled on a specific disk by deleting the brand altogether.  This      might be useful for a disk that will be stored or archived away.  Remember,     however, that upon the next lock or file encryption operation that the key      will be branded on the disk again.                                                                                                                              OTHER USES                                                                                                                                                      With a little imagination, the uses for PC Padlock can be limitless.  Always    bear in mind, though, that any disk that may fall into unfriendly hands for     extended periods of time needs to be encrypted for maximum protection.                                                                                                                                                                                                     IN CASE OF DIFFICULTY                                                          ───────────────────────                                                                                                               DOS GIVES A "Bad command or file name" ERROR WHEN I TRY TO RUN PC PADLOCK.                                                                                      The directory which contains the program (the installation directory) is        probably not in your current path.  To check this, type "path" from the DOS     prompt.  If the installation directory does not appear in the list DOS          responds with, you need to add it to your path.  Refer to padlock.doc file on   how to do this.                                                                                                                                                 PC PADLOCK DOES NOT RUN, GIVING AN "Abnormal program termination" ERROR.                                                                                        You may have entered an invalid path name or have a DOS version earlier than    V2.1.                                                                                                                                                           PC PADLOCK WILL NOT RECOGNIZE MY PASSWORD ALTHOUGH I AM SURE IT IS CORRECT.                                                                                     All passwords used in PC Padlock are case sensitive.  That means that lower     case letters, such as "abcdef", are considered different characters from upper  case ones, such as "ABCDEF".  Hit the Caps Lock key and try your password       again.  If this does not work, it is either the incorrect password, or you may  have mixed lower and upper case letters in the password (although this is       unlikely).                                                                                                                                                      There is absolutely no method to view, edit, or delete the password.  Please    refer to the note in the "Lock" section of the RUNNING PC PADLOCK chapter for   more information.                                                                                                                                               PC PADLOCK GIVES A "cannot read disk" ERROR, BUT I AM SURE IT IS FORMATTED, IN  THE DRIVE, AND THE DRIVE DOOR IS CLOSED.                                                                                                                        The floppy disk is probably not the correct density - double density drives     can only secure double density disks, and high density drives can only secure   high density disks.  Attempts to secure low density disks in a high density     drive may result in a loss of disk contents and integrity.                                                                                                      I COPIED AN ENCRYPTED FILE AND PC PADLOCK SAYS THE COPY IS NOT ENCRYPTED, BUT   WHEN I VIEW THE FILE, IT IS.  HOW MAY I STRAIGHTEN IT OUT?                                                                                                      You should never copy an encrypted file to another name, directory, or drive.   Doing so destroys internal flags that tell PC Padlock the file is encrypted.    The simplest solution is to decrypt the original source file, copy the source   file again to overwrite the damaged file, then encrypt both the original and    the copy.                                                                                                                                                       If this is not feasible (the original source file has been purged, etc.), you   must encrypt the copy of the encrypted file (which will actually decrypt the    file), then copy it to another name.  Copying must be used - renaming will not  work.  This will return the file to normal, and you can manipulate it with DOS  and/or encrypt it as you wish.                                                                                                                                  I AM STILL UNABLE TO SOLVE MY PROBLEM.  HOW MAY I RECEIVE TECHNICAL             ASSISTANCE?                                                                                                                                                     Simply call Del Mar Software at (404) 977-0419.  Or, you may leave mail on      CompuServe to user ID # 76570,3342.                                                                                                                             IS THIS VERSION OF PC PADLOCK COMPATIBLE WITH EARLIER VERSIONS?                                                                                                 Yes and no.  This version will unlock and decrypt disks protected with any      earlier version.  However, disks secured with V3.0 cannot be unlocked or        decrypted by these earlier versions.                                                                                                                            Your conversion from an earlier version is simple - merely unprotect the old    disks with V3.0 and continue to use this new version.                          