Excluding Files or Directories from Rekey
When you add a resource set to a key rule in a policy, you can select the Exclude Rule option. That tells CipherTrust Manager that the directories and/or files in the resource set should use a different key than the rest of the data in the CTE-LDT GuardPoint. If you specify clear_key for the key rule, then the directories and/or files in the resource set will be left unencrypted. Otherwise, you can select any non-versioned key to apply to those directories and/or files.
For more on Exclusion rules, see the following topics:
