By default, all users are assigned to a policy template that contains rules and restrictions for stronger security. As a second step, admins can set up Advanced Control to have better supervision over users in the subscription.
With Advanced Control, your subscription admins have more control over user accounts – they can help reset your forgotten password or revoke access to your data from lost or stolen devices.
Policy templates
Admins can assign different sets of security measures to user groups and they can also modify these policies at any moment.
Policy templates include settings for:
- 2-step verification
- IP filtering
- Timeout policies
- Allowed devices
- Folder and link sharing
- SSO activation
📝 Note: In the Enterprise plan the data residency can be defined for each policy template separately.
Advanced Control
With Advanced Control switched on, you can give your subscription owner or co-owner permission to have cryptographic access to your files, reset your password and remove lost/breached devices. Also, the co-owner role is available only on Enterprise plan and Advanced Control needs to be switched on to enable this admin role.
When the subscription owner decides to switch Advanced Control on, an email and an in-app notification will be sent to you.
How to accept policy changes
You may need to enter the email address of your subscription owner or co-owner. Make sure you type in the correct one!
- Open Tresorit on desktop, web or mobile.
- A pop-up will appear, notifying you of changes made in policies.
- Check the box to accept changes.
- Click Accept.
What happens if I don’t accept policy updates?
You have an option to refuse changes and sign out from Tresorit. If you do so, synchronization will stop with the local computer and the latest versions of files might not be available.
If you don’t respond to policy changes and close the app, syncing will continue in the background but you won’t be able to use Tresorit features until you accept changes.
Accepting the changes comes with a lot of benefits though: admins can reset passwords and remove lost or stolen devices if needed. This will help them keep your organization’s data safe.
What is a certificate thumbprint?
The certificate thumbprint helps to make processes safer by identifying your Administrator. Compare the thumbprint found in your app with your administrator's to confirm the validity of the policy update.
Still have questions left? Drop us a line