How to install and use FenixPyre Encryption/Decryption Tool

Offline FileKey Decryption for FenixPyre Tenants

This guide walks you through loading offline file keys and performing decryption using the FenixPyre Encryption/Decryption Tool. It is intended for FenixPyre customers who decrypt files using a FileKeys package and their organization's Master Key.

📋 Prerequisites

Before you begin, ensure you have the following:

• Administrator Privileges - You must have Admin rights on the Windows machine to install the script and modify the Windows Registry.

• FileKeys Package - Contact FenixPyre Support and request offline decryption assistance. After verification, a secure download link to a .zip archive containing the necessary file keys will be provided.

• Master Key - The administrator should already have access to the Master Key as a .txt file generated via the Admin Dashboard.

Uninstall the FenixPyre Windows Agent first. It is recommended to uninstall the FenixPyre Windows agent before installing the script. This avoids conflicts between the agent and the standalone enc-dec utility when accessing the local secure database and file keys.

📍 Quick Reference

Item	Value
Registry Path	HKEY_LOCAL_MACHINE\Software\FenixPyre\Standalone\
Decryption Action	DECRYPT
Progress Keys	status, detailedStatus

⚙️ Step-by-Step Decryption Guide

Step 1: Prepare the Installation Files

1. Contact the Support Team to obtain the Enc-Dec Tool ZIP and your DB file.

2. Download and extract the Enc-Dec Tool ZIP to a local directory on your machine.

Step 2: Install the EncDec Service

1. Open PowerShell as an Administrator. (Right-click the Start button and select Windows PowerShell (Admin).)

2. Navigate to the extracted FPEncDecService directory:

cd "C:\path\to\extracted\FPEncDecService"

1. Run the following installation command. Be sure to replace <your_org_id> and <your_org_email> with your actual credentials:

PowerShell -ExecutionPolicy Bypass -File FPEncDecServiceInstall.ps1 -action install -orgId <your_org_id> -username <your_org_email>

Example: -orgId 12345 -username [e-mail]

Step 3: Prepare the FileKeys Package

1. Contact FenixPyre Support and request offline decryption assistance.

2. Download the .zip archive provided via the secure download link and extract its contents to a known local directory.

3. Ensure you have access to the Master Key (.txt) generated via the Admin Dashboard.

Step 4: Verify Key Sync Timing (for LOADKEYS)

Before using the LOADKEYS action, ensure the file keys have fully synced from the FenixPyre storage system to your local storage.

🔄 Key syncing occurs every 12 hours. 🕒 To ensure a complete set of keys is available for decryption, wait at least 12 hours after the last encryption operation before downloading the key bundle. 📥 Attempting to download and load file keys before this window may result in missing or incomplete decryption capabilities.

Recommendation: Only request or download the offline key bundle once the 12-hour sync window has passed.

Step 5: Load the FileKeys via the Registry

1. Press Win + R, type regedit, and press Enter to open the Registry Editor.

2. Navigate to the following path:

HKEY_LOCAL_MACHINE\Software\FPEncDecTool

1. Create or update the following three keys (create any that do not already exist). All keys are of type REG_SZ:

Key	Type	Description
folderPath	REG_SZ	Path to the extracted folder containing the .parquet files.
masterKeyFilePath	REG_SZ	Path to the .txt Master Key downloaded from the Admin Dashboard.
action	REG_SZ	Set to LOADKEYS to initiate the key loading process.

Use double backslashes (\\) or quotes for paths with spaces.

Once these values are set, the utility will begin loading keys into the local database. You can monitor progress using the status and detailedStatus keys in the same registry path.

Step 6: Perform Decryption Using Loaded FileKeys

Once the key loading process completes successfully:

1. Update the folderPath registry key to point to the folder containing the encrypted files.

2. Change the action registry key to DECRYPT.

This will trigger the utility to decrypt the files in the specified folder using the locally available file keys.

Step 7: Verify Decryption

1. Navigate to the folder you specified in the folderPath registry key.

2. Verify that the files have been successfully decrypted and are accessible.

---

Need Help? If you encounter any errors during key loading or the files fail to decrypt, please reach out to the Support Team with a screenshot of the Registry settings and the status / detailedStatus values.