Dell Encryption External Media 对话框自定义

受影响的产品：

• Dell Data Protection | External Media Edition
• Dell Encryption External Media

自定义 EMS 对话框

工作原理

名为 EMSStrings.xml 的 XML 文件用于自定义 EMS 对话框。文件必须放置在 C:\Windows\System32 中，才能应用自定义。从具有自定义对话框的计算机调配的任何设备都已将 EMSStrings.xml 文件添加到 _Encryption_Data_Do_Not_Delete_ 文件，因此自定义操作通过设备进行。
自定义按以下顺序应用：

1. 如果受保护设备具有 EMSStrings.xml 文件，则使用该文件。
2. 如果没有，则应用将文件置于 C：\Windows\System32 （如果存在）。
   • 对于 v8.18 及更高版本，将文件置于 C:\Program Files\Dell\Dell Data Protection\Encryption 中。

XML 文件何时在设备上更新？

每当设备经过身份验证并且所有者登录时，XML 文件将使用 C:\Windows\System32 中的文件进行更新。

如果 XML 文件已更新，何时应用更改？

编辑 C:\Windows\System32 中的文件后，新文本将在下次插入设备时应用。请记住，如果加密设备仍具有较旧的 XML 文件，我们会使用该文件，但最终会更新设备中的 XML 文件。

是否涉及 EE 服务器或 VE 服务器？

否，EE 服务器或 VE 服务器不提供 XML 文件。XML 文件可以使用组织可用的任何推送技术推送到客户端计算机。

XML 文件的格式是什么？

版本元素

版本元素定义客户端版本。版本元素仅用于日志记录。

<version>
<cmgClient>8.x.x</cmgClient>
<customStrings>1.0</customStrings>
</version>

语言集

语言集是针对特定语言的对话框自定义。

<languageSet languageId="0x00"></languageSet>

languageId 定义 Windows 定义的目标主要语言。在本例中， 0x00 定义 默认 语言集。如果找到用户当前的 MUI 语言，我们使用该语言。如果没有，我们使用默认语言 (0x00)。

以下语言 ID 可用：

对话框自定义 XML 元素

对话框 XML 元素用于自定义对话框。以下是基本对话框自定义条目的示例：

<dialog id="A-1">
<message>Ask to Shield unprotected media.[EndState: ALL]</message>
</dialog>

id 属性

每个对话框自定义元素都需要一个 id 属性，用于定义要自定义的对话框。下面的屏幕截图表定义了对话框 ID。

endState 属性

某些对话框支持 endState 属性。此属性可用于为特定对话框提供不同的自定义，如果用户不继续此过程，该属性可能会因设备的最终状态而异。例如，A-1 对话框可以有三个不同的条目，每个最终状态各一个：

<dialog id="A-1" endState="blocked">
<message>Ask to Shield unprotected media.[EndState: BLOCKED]</message>
<link url="https:\\www.dell.com">Link to more info about encryption or being blocked...</link>

</dialog>
<dialog id="A-1" endState="readonly">
<message>Ask to Shield unprotected media.[EndState: READ-ONLY]</message>
</dialog>
<dialog id="A-1" endState="fullaccess">
<message>Ask to Shield unprotected media.[EndState: FULL ACCESS]</message>
</dialog>

消息 子元素

message 元素用于自定义对话框的主要消息。

链接 子元素

link 元素仅支持 A-？对话框，这允许向对话框添加 URL 链接。它采用以下格式：

<link url="https:\\www.dell.com">Link to more info about encryption or the end state...</link>

其中 url 属性指定链接，内部文本指定要显示的可单击消息。

iForgot的 子元素

iForgot元素仅支持C-1和C-2对话框，它指定用户按下I Forgot按钮时显示的消息。

fusWarningChild 元素

fusWarning 元素仅支持 C-1 和 C-2 对话框，如果用户在多个用户登录到工作站时尝试对设备进行身份验证，则会显示该元素。此元素明确指出存在安全风险。

cancelWarning 子元素

cancelWarning 元素仅支持 F-1 对话框，它指定用户取消手动身份验证时显示的消息。

对话框 ID	屏幕截图			描述	支持的自定义
	Blocked	只读访问	完全访问
A-1				要求保护未受保护的介质。如果用户单击 No，设备将处于未保护状态，并且访问权限取决于 Access To un-Shielded Media 策略。	endState 消息
A-2				如果设备受 5.3 之前版本的 EMS 保护，则会显示此对话框以询问用户是否要升级到 EMS。仅当可以根据新的漫游规则使用当前用户/计算机组合升级设备时，才会显示此消息。	endState 消息
A-3				当必须还原计算机中的关键材料时，将显示此对话框。由于手动身份验证失败、用户篡改或设备损坏，它可能已被删除。需要重置关键材料的策略更改也会触发此机制。	endState 消息链接
B-1				当设备被保护或恢复时，将显示此对话框。	endState 消息
B-2				在用户输入不符合管理员设置的限制的密码后显示。	endState 消息
B-3				当必须再次设置设备的密码（通常是手动身份验证的结果）时显示的对话框。在这种情况下， 取消 会使设备处于策略驱动状态。	endState 消息
B-4				当提供的密码不符合密码限制时，重新显示密码重置对话框。	endState 消息
B-5				将新密码设置为与以前的密码相同后，重新显示密码重置对话框。	消息
C-1				当无法进行自动身份验证时，向用户请求设备密码进行密码身份验证。	endState 消息 iForgot fusWarning
C-2				如果为身份验证提供的密码不正确，我们要求用户重试输入密码。	endState 消息 iForgot fusWarning
D-1				在进行清除时显示的 media Shielded 对话框，并且托盘图标将显示。	是
D-2				关闭清除时显示的 media Shielded 对话框。	是
E-1				当用户要求在设备经过身份验证后更改现有设备密码时显示。	是
E2				更改密码失败时（可能由于当前密码不正确），重新显示密码更改对话框。	是
E-3				当新密码不符合管理密码限制时，重新显示密码更改对话框。	是
E-4				当前密码不再满足新策略要求时，将显示密码更改对话框。	是
F-1				当用户无法输入密码的次数达到策略定义的次数时显示。	是
F-2				当用户无法输入密码的次数达到策略定义的次数时显示。在这种情况下，VolumeInfo.xml 文件丢失或损坏。	在自定义方面，这与 F-1 相同。
G-1				当密钥材料丢失，但机器/用户组合不允许我们恢复设备时显示（告知用户将设备插入原始用户登录的受防护计算机（如果漫游）以恢复密钥材料）。如果不漫游，则需要完整的计算机/用户匹配才能恢复！	是
G-2				当设备受 CMG 5.3 之前版本的保护并且无法升级时显示，因为它不在原始用户下的原始计算机中。	是
G-3				当介质（软盘）太小而不允许 EMS 保护时显示。	是
G-4				当设备没有足够的可用空间来 EMS 保护设备时显示。	是
G-5				当设备的关键材料丢失并且由于无法检索 Shield ID 而无法从中恢复时显示。	是
G-6				当策略不允许在没有安装 Shield 的情况下访问加密介质时显示。	是
G-7				如果用户将手持 EMS 设备插入 Windows EMS 保护的计算机，则显示。	是
G-8				由于手动身份验证失败而删除关键材料时显示。这由策略控制。	是
G-9				当设备因手动身份验证失败而进入冷却期时显示。这由策略控制。	是
G-10				警告用户，当策略需要时，只读设备无法被保护。	是
G-11				警告用户设备正在其他计算机中进行升级清除。	是
G-12				无法修复比安装的 EMS 更新的设备。	是
G-13				卷使用更新、不受支持的 IFF 格式进行加密。介质被阻止。	是
H-1				显示气泡或对话框，指示已接受设备密码。	是
H-2				显示 气泡 ，指示设备已在原始保护计算机中自动进行身份验证。	是
I-1				扫描期间显示的动画对话框（EMS 必须显示此对话框，因为在完成此步骤之前删除设备会在设备中保留未加密的数据）。	是
I-2				解密清除期间显示的动画对话框。EMS 必须显示这一点，因为在完成此步骤之前删除设备会在设备中保留未加密的数据。	是
J-1				在将 EMS 文件安装到新的受保护设备的过程中使用的进度对话框。不应弹出介质。	是
J-2				在保护设备中升级 EMS 文件的过程中使用的进度对话框。 不应弹出介质。	是
K-1				自动验证设备时，用于快速用户切换相关警告的 Yes/No 对话框。	是

XML 示例

<?xml version="1.0" encoding="utf-8"?>

<emsCustomDialogStrings>

<version>
<cmgClient>8.x.x</cmgClient> 
<customStrings>1.0</customStrings> 
</version> 

<!-- ENGLISH/DEFAULT --> 
 
<languageSet languageId="0x00"> 
 
<dialog id="A-1"> 
<message>Ask to Shield unprotected media.[EndState: ALL]</message> 
<link  url="https:
www.dell.com">Link  to more  info  about  encryption  or  the  end state...</link> 
</dialog> 

<!-- 
<dialog id="A-1" endState="blocked"> 
<message>Ask to Shield unprotected media.[EndState: BLOCKED]</message> 
<link  url="https:
www.dell.com">Link  to more  info  about  encryption  or  being   blocked...</link> 
</dialog>  

<dialog id="A-1" endState="readonly"> 
<message>Ask to Shield unprotected media.[EndState: READ-ONLY]</message> 
</dialog> 

<dialog id="A-1" endState="fullaccess">  
<message>Ask to Shield unprotected media.[EndState: FULL ACCESS]</message> 
</dialog>  

--> 

<dialog id="A-2" endState="blocked"> 
<message>Ask to upgrade pre-EMS device (CMG Shielded) to EMS Shielding.[EndState: BLOCKED]</message> 
<link  url="https:
www.dell.com">Link  to more  info  about  pre­EMS  devices or  being   blocked...</link> 
</dialog> 

<dialog id="A-2" endState="readonly"> 
<message>Ask to upgrade pre-EMS device (CMG Shielded) to EMS Shielding.[EndState: READ-ONLY]</message> 
</dialog> 

<dialog id="A-2" endState="fullaccess"> 
<message>Ask to upgrade pre-EMS device (CMG Shielded) to EMS Shielding.[EndState: FULL ACCESS]</message> 
</dialog> 

<dialog id="A-3" endState="blocked"> 
<message>Ask to restore key material.[EndState:  BLOCKED]</message> 
<link  url="https:
www.dell.com">Link  to more  info  about  recovery or  being   blocked...</link> 
</dialog> 

<dialog id="A-3" endState="readonly"> 
<message>Ask to restore key material.[EndState:  READ-ONLY]</message> 
</dialog> 

<dialog id="A-3" endState="fullaccess">  
<message>Ask to restore key material.[EndState: FULL ACCESS]</message> 
</dialog> 

<dialog id="B-1" endState="blocked"> 
<message>This dialog is shown when a device is Shielded or recovered.[EndState: BLOCKED]</message> 
</dialog> 
 
<dialog id="B-1" endState="readonly"> 
<message>This dialog is shown when a device is Shielded or recovered.[EndState: READ-ONLY]</message> 
</dialog> 

<dialog id="B-1" endState="fullaccess"> 
<message>This dialog is shown when a device is Shielded or recovered.[EndState: FULL ACCESS]</message> 
</dialog> 

<dialog id="B-2" endState="blocked"> 
<message>Shown after the user enters a password which does not meet the restrictions placed by the Administrator.[EndState:  BLOCKED]</message> 
</dialog> 

<dialog id="B-2" endState="readonly"> 
<message>Shown after the user enters a password which does not meet the restrictions placed by the Administrator.[EndState:  READ-ONLY]</message> 
</dialog> 

<dialog id="B-2" endState="fullaccess"> 
<message>Shown after the user enters a password which does not meet the restrictions placed by the Administrator.[EndState:  FULL ACCESS]</message>  
</dialog> 

<dialog id="B-3" endState="blocked"> 
<message>Dialog  displayed when the device's password needs to be set again, usually  as a result of a manual authentication.  In this case a 'Cancel' will leave the device in a policy driven state..[EndState: BLOCKED]</message> 
</dialog> 

<dialog id="B-3" endState="readonly"> 
<message>Dialog  displayed when the device's password needs to be set again, usually  as a result of a manual authentication.  In this case a 'Cancel' will leave the device in a policy driven state..[EndState: READ-ONLY]</message> 
</dialog> 

<dialog id="B-3" endState="fullaccess"> 
<message>Dialog  displayed when the device's password needs to be set again, usually  as a result of a manual authentication.  In this case a 'Cancel' will leave the device in a policy driven state..[EndState: FULL ACCESS]</message> 
</dialog> 

<dialog id="B-4"> 
<message>Redisplay the password reset dialog when the password provided did not meet the password restrictions.</message> 
</dialog> 

<dialog id="B-5"> 
<message>Redisplay the password reset dialog after setting the new password to be the same as the previous password.</message> 
</dialog> 

<dialog id="C-1" endState="blocked">  
<message>Request the device password from user for password authentication when auto authentication is not possible.[EndState: BLOCKED]</message> 
<iForgot>This is the confirmation that you really want to say 'I Forgot'. If you do you, will need to manually authenticate by contacting an administrator or logging in the owning user.</iForgot> 
<fusWarning>This is the warning about multiple  users being logged in which will result in all users having  access to the device if it is authenticated!</fusWarning> 
</dialog> 

<dialog id="C-1" endState="readonly"> 
<message>Request the device password from user for password authentication when auto authentication is not possible.[EndState: READ-ONLY]</message> 
<iForgot>This is the confirmation that you really want to say 'I Forgot'. If you do you, will need to manually authenticate by contacting an administrator or logging in the owning user.</iForgot> 
<fusWarning>This is the warning about multiple  users being logged in which will result in all users having  access to the device if it is authenticated!</fusWarning> 
</dialog> 

<dialog id="C-1" endState="fullaccess"> 
<message>Request the device password from user for password authentication when auto authentication is not possible.[EndState: FULL ACCESS]</message> 
<iForgot>This is the confirmation that you really want to say 'I Forgot'. If you do you, will need to manually authenticate by contacting an administrator or logging in the owning user.</iForgot> 
<fusWarning>This is the warning about multiple  users being logged in which will result in all users having  access to the device if it is authenticated!</fusWarning> 
</dialog> 

<dialog id="C-2" endState="blocked"> 
<message>If the password provided for authentication was incorrect, we ask the user to retry entering the password.[EndState: BLOCKED]</message> 
<iForgot>This is the confirmation that you really want to say 'I Forgot'. If you do you, will need to manually authenticate by contacting an administrator or logging in the owning user.</iForgot> 
<fusWarning>This is the warning about multiple  users being logged in which will result in all users having  access to the device if it is authenticated!</fusWarning> 
</dialog> 

<dialog id="C-2" endState="readonly">  
<message>If the password provided for authentication was incorrect, we ask the user to retry entering the password.[EndState: READ-ONLY]</message> 
<iForgot>This is the confirmation that you really want to say 'I Forgot'. If you do you, will need to manually authenticate by contacting an administrator or logging in the owning user.</iForgot> 
<fusWarning>This is the warning about multiple  users being logged in which will result in all users having  access to the device if it is authenticated!</fusWarning> 
</dialog> 

<dialog id="C-2" endState="fullaccess"> 
<message>If the password provided for authentication was incorrect, we ask the user to retry entering the password.[EndState: FULL ACCESS]</message> 
<iForgot>This is the confirmation that you really want to say 'I Forgot'. If you do you, will need to manually authenticate by contacting an administrator or logging in the owning user.</iForgot> 
<fusWarning>This is the warning about multiple  users being logged in which will result in all users having  access to the device if it is authenticated!</fusWarning> 
</dialog> 

<dialog id="D-1"> 
<message>The 'media Shielded' dialog displayed after provisioning  of a device when sweeping will occur.</message> 
</dialog> 

<dialog id="D-2"> 
<message>The 'media Shielded' dialog displayed after provisioning  of a device, but *no* sweep will occur.</message> 
</dialog> 

<dialog id="E-1"> 
<message>Displayed  when the user asks to change the existing  device password after a device has been authenticated.</message> 
</dialog> 

<dialog id="E-2">  
<message>Redisplay password change dialog when the change of password fails, probably due to an incorrect current password.</message> 
</dialog> 

<dialog id="E-3"> 
<message>Redisplay password change dialog when the new password does not meet administrative  password restrictions.</message> 
</dialog> 

<dialog id="E-4"> 
<message>Display password change dialog when the current password no longer meets new policy requirements.</message> 
</dialog> 

<dialog id="F-1"> 
<message>Shown when the user has failed to enter the password the number of times defined by policy.</message> 
<cancelWarning>This text should express the repercusions of cancelling manual authentication!</cancelWarning> 
</dialog> 

<dialog id="G-1"> 
<message>Shown when the key material is lost but the machine/user combination  does not allow us to recover the device. Should tell the user to insert the device in a CMG Shielded machine where the original user is logged in (if Roaming) to restore the key material. If not Roaming, we need a full machine/user match to recover.</message> 
</dialog> 

<dialog id="G-2"> 
<message>Displayed when an external device was Shielded by CMG (pre-5.3)  and cannot be upgraded because its not in the original machine under the original user.</message> 
</dialog> 

<dialog id="G-3">  
<message>Displayed when the media (floppies) is too small to allow EMS Shielding.</message> 
</dialog> 

<dialog id="G-4" endState="blocked"> 
<message>Displayed when the external device does not have enough free space to EMS Shield the device.[EndState: BLOCKED]</message> 
</dialog> 

<dialog id="G-4" endState="readonly"> 
<message>Displayed when the external device does not have enough free space to EMS Shield the device.[EndState: READ-ONLY]</message> 
</dialog> 

<dialog id="G-4" endState="fullaccess"> 
<message>Displayed when the external device does not have enough free space to EMS Shield the device.[EndState: FULL ACCESS]</message> 
</dialog> 

<dialog id="G-5"> 
<message>Shown when a device's key material has been lost and there is no way to recover from it because there is no way to retrieve the Shield ID.</message> 
</dialog> 

<dialog id="G-6"> 
<message>Displayed when policy does not allow access of encrypted media w/o the CMG Shield installed.</message> 
</dialog> 

<dialog id="G-7"> 
<message>Displayed if the user happens to insert a Handheld EMS device into an Windows EMS Shielded machine.</message> 
</dialog> 

<dialog id="G-8">  
<message>Displayed when the key material is deleted due to a manual authorization failure. This is controlled by policy.</message> 
</dialog> 

<dialog id="G-9"> 
<message>Displayed when device has entered a cooldown  period due to a manual authorization failure. This is controlled by policy.</message> 
</dialog> 

<dialog id="G-10"> 
<message>Warns the user that a read-only device cannot be Shielded when policy requires it.</message> 
</dialog> 

<dialog id="G-11"> 
<message>Warns the user that the device was undergoing an upgrade sweep in a different  machine.</message> 
</dialog> 

<dialog id="G-12"> 
<message>Cannot repair a device newer than the EMS currently installed.</message> 
</dialog> 

<dialog id="G-13"> 
<message>Volume is encrypted with an newer, unsupported IFF format. Media is blocked.</message> 
</dialog> 

<dialog id="G-14"> 
<message>Shown when a user double-clicks  a file in EMSExplorer. It tells them that this feature has been disabled.</message> 
</dialog> 

<dialog id="G-15"> 
<message>If during a sweep we fail to encrypt a file due to lack of free space on the device, this dialog is shown.</message> 
</dialog> 

<dialog id="J-1"> 
<message>Progress dialog used during the process of installing EMS files into a newly Shielded device. Media *should not* be ejected at this point.</message> 
</dialog> 

<dialog id="J-2"> 
<message>Progress  dialog  used  during  the  process   of  upgrading EMS  files  in  a shielded device.  Media  *should not*  be ejected  at this  point.</message> 
</dialog> 

<dialog id="K-1"> 
<message>The Yes/No Dialog  being used for the Fast User Switching  related warning when a device is being autoauthenticated...</message> 
</dialog> 

</languageSet> 

</emsCustomDialogStrings> 

要联系支持部门，请参阅 Dell Data Security 国际支持电话号码。
转至 TechDirect，在线生成技术支持请求。
要获得更多见解和资源，请加入戴尔安全社区论坛。