Parameters moved to the security policy

The following table lists the old parameters in the SBox.ini file and their equivalents in the .json security policy configuration file.

See the Advanced Configuration Guide for more information on setting up the security policy.

SBox.ini file section

Parameter

Equivalent in the .json file

User

RootPath1

RootPath2

accountPolicy > parameters > primaryUserPath

accountPolicy > parameters > secondaryUserPath

CRL LDAPTimeOut revocationPolicy > ldapTimeOutInSeconds
HTTPTimeOut revocationPolicy > httpTimeOutInSeconds
DontDisplayWrnMsgDBDeleted revocationPolicy > displayWarningDBDeleted
DontDisplayWrnMsgDBCorrupted revocationPolicy > displayWarningDBCorrupted
Team ExcludedPath teamPolicy > excludedFolders
SecureDragAndDrop  teamPolicy > secureDragAndDrop
ShowSuccessfulOperations teamPolicy > showSuccessfullyProcessedFiles
SBox.NewUserWizard AllowNewUser

accountPolicy > creation > passwordAccountMethod

 

accountPolicy > creation > cardAccountMethod

UsrPwdMinLen accountPolicy > creation > passwordAccount > totalCharMinCount
UsrPwdCharSet

accountPolicy > creation > passwordAccount > alphabeticCharMinCount

 

accountPolicy > creation > passwordAccount >numericCharMinCount

 

accountPolicy > creation > passwordAccount >specialCharMinCount

SBox.NewUserWizard SBox.KeyRenewalWizard Pkcs12Import accountPolicy > creation > passwordAccount > allowedKeySources with the value “p12File”

NewUser

KeyRenewal

CertLife

accountPolicy > creation > passwordAccount > selfSignedOptions > baseLifetimeYears

 

accountPolicy > creation > passwordAccount > selfSignedOptions >renewalPeriodYears

CRYPTO_AES_256BITS

accountPolicy > parameters > encryptionAlgorithm

 

accountPolicy > parameters > hashAlgorithm

 

accountPolicy > parameters > keyEncryptionMethod

 

accountPolicy > creation > accountKeyMode

KEY_RSA_2048BITS accountPolicy > creation >  allowedKeyTypesForP12Import
KEY_RSA_4096BITS accountPolicy > creation >  allowedKeyTypesForP12Import
SBox.KeyRenewalWizard AutomaticRenewFromCard accountPolicy > parameters >  enableAutomaticRenewFromCard
Logon AllowCard accountPolicy > parameters > accountMode
AllowPassword accountPolicy > parameters > accountMode
ConnectOnCard accountPolicy > cardaccount > connectOnCardInsertion
UnfreezeOnCard accountPolicy > cardaccount > unfreezeOnCardInsertion
RepairCardAccount accountPolicy > cardaccount > enableRepairCardAccount
NewUser AuthorityCommonNameEncryption accountPolicy > creation > automatic > encryptionKeyAuthorityId
AuthorityCommonNameSignature accountPolicy > creation > automatic > signatureKeyAuthorityId
Directory AddAsteriskSuffixInLdapFilter directories > ldap > addWildcardSuffixInFilter
AddAsteriskPrefixInLdapFilter directories > ldap >addWildcardPrefixInFilter
Disk MaxVolumeSize diskPolicy > maxSizeMB
FileSystem diskPolicy > fileSystem
Label diskPolicy > volumeName
  AllocUnit diskPolicy > allocationUnitKB
QuickFormat diskPolicy > enableQuickFormat
Compression diskPolicy > enableCompression
CreateDiskOnFirstConnection diskPolicy > automaticCreation
VboxFullPathName diskPolicy > automaticCreation > vboxFullPath
SilentSize diskPolicy > automaticCreation > sizeMB
AutoMount diskPolicy > automaticCreation > autoMount
MountLetter diskPolicy > automaticCreation > mountLetter
CloseReportWindow diskPolicy > automaticCreation > showFinalReport
Verbose
ModifyRescueFile diskPolicy > enableRescueFileModification
ExpertMode diskPolicy > enableExpertMode
MountAsRemovable diskPolicy > mountAsNonRemovable
File AllowTranscipheringWithDecipheredKeys filePolicy >  allowTranscipheringWithDelegationKeys
Shredder DisconnectedPattern shredderPolicy > shreddingPatternBytes
Sign MailToAskForSignature  signPolicy > preselectMailToAskForSignature
MailToNotifyCoWorkers  signPolicy > preselectMailToNotifyCoWorkers
NewUserCard AllowNewUserAuto accountPolicy > creation > cardAccountMethod with the value “automatic”