IBM FILE AND FOLDER ENCRYPTION (FFE) 
Access Control List Repair Tool and Invalid File Length Notifier
for Microsoft Windows 2000 and XP
Version 1.10.001a


This file contains the latest information about the Access Control
List (ACL) Repair Tool for use with the IBM Client Security File and
Folder Encryption (FFE) utility.  The ACL Repair Tool searches
protected folders on your computer and verifies that each file
contains a valid ACL.  Due to a problem with versions of FFE prior
to 2.0, certain types of files might be altered to have a blank ACL.
The ACL Repair Tool resets the ACL of these files to a default ACL
which restores access to the file.  Also it creates a list of any
files that may have been corrupted by having an invalid length.

**IMPORTANT**
This utility should be used PRIOR to uninstalling any version of
FFE prior to 2.01.  Otherwise, the uninstall might fail and leave
affected files inaccessible.

Print this file so that you can refer to it during the installation.


Supported Operating Systems
===========================
Microsoft Windows 2000
Microsoft Windows XP Professional
Microsoft Windows XP Home


Known limitations or issues
===========================

Performance
-----------
When a large number of folders and files have been protected, the ACL
Repair Tool might take several minutes to complete its repairs. To
end the application in the middle of processing, open Task Manager,
select the Access Control List Repair Tool under the Applications tab,
and click End now.

Incomplete processing
---------------------
Certain conditions can occur in FFE-protected folders that do not
allow the ACL Repair Tool to access some files. If this situation
occurs, the utility will stop processing protected folders and the
user must exit the utility.

NTFS support only for ACL fixing
--------------------------------
The FAT32 file system does not provide support for ACLs; therefore,
protected folders on FAT32 drives will not contain files which need to
be repaired.  This utility will not process any protected folders on a
FAT32 drive.

Inaccessible Microsoft Word files
---------------------------------
An issue can occur with Microsoft Word files which is very similar to
the issue that this utility fixes.  However, the Word file limitation
is not addressed by this utility.

Processes files for the current user only
-----------------------------------------
When the utility is executed, it only processes protected folders for
the user that is currently logged in.  If multiple users of the
system have protected folders, each user must log in and run the
utility separately.  A seperate file with the list of files that have
the length error is created for each user.  It is written to
c:\ibmtools\ffeacl\<username>_ffe.dat

FFE must be running
-------------------
To get the list of files that have this invalid length error, FFE must
be enabled on the system.


USAGE
=====
Downloading the ACL repair tool
-------------------------------
1. Click the file link to download the file from the Web page.
2. When prompted, select a drive and directory in which to save
   the downloaded file.


Extracting the ACL repair tool
------------------------------
1.  Click Start, select Find or Search, then click Files and folders.
2.  Type ffeaclus.exe in the search field, then click Find Now. This
    will locate the file you just downloaded.
3.  Double-click the ffeaclus.exe icon.
4.  Click Next. Read the license agreement.
5.  Click I accept the terms in the license agreement.
6.  Click Next.
7.  Ensure that "Save files in folder" is set to
    C:\IBMTOOLS\FFEACL.
8.  Click Next.
9.  Click Finish.

Running the ACL Repair Tool
---------------------------
1.  Click Start, then click Run.
2.  Type C:\IBMTOOLS\FFEACL\ffeacl.exe, then click OK.
    A dialog box will appear. The current user will be listed in the
    lower left corner. Only folders protected by this user will be
    processed.
3.  Click Start Utility. The display will show the number of folders
    being processed.  When complete, a short summary will be displayed.
    NOTE: You can click Detailed Summary to open a detailed summary
    report text file in the system default text editor. This file is
    located in the install directory of IBM Client Security Software
    (typically C:\Program Files\IBM\Security).
4.  Click Finish.

Running the ACL Repair Tool silently
------------------------------------
Procedure A:
1.  Open a command prompt and change the directory to the path of file
    you downloaded (i.e.  c:\cd C:\IBMTOOLS\FFEACL\).
2.  Type ffeacl.exe /s and press Enter.

Procedure B:
1. Click Start, then click Run.
2. Enter the path, filename and parameter 
(i.e. C:\IBMTOOLS\FFEACL\ffeacl.exe /s).
3. Click OK.

The utility will generate a detailed summary report file in the Client
Security Software installation folder
(C:\Program Files\IBM\Security\fferpt.txt).


Uninstalling the ACL Repair Tool
--------------------------------
Delete the folder C:\IBMTOOLS\Drivers\FFEACL.