Ecryptfs-siirtomenettely

Specifies the action that should be taken when the user's home directory was created with ecryptfs encryption and needs to transition to ext4 encryption.

If you set this policy to 'DisallowArc', Android apps will be disabled for the user and no migration from ecryptfs to ext4 encryption will be performed. Android apps will not be prevented from running when the home directory is already ext4-encrypted.

If you set this policy to 'Migrate', ecryptfs-encrypted home directories will be automatically migrated to ext4 encryption on sign-in without asking for user consent.

If you set this policy to 'Wipe', ecryptfs-encrypted home directories will be deleted on sign-in and new ext4-encrypted home directories will be created instead. Warning: This removes the user's local data.

If you set this policy to 'AskUser', users with ecryptfs-encrypted home directories will be offered to migrate.

This policy does not apply to kiosk users. If this policy is left not set, the device will behave as if 'DisallowArc' was chosen.

Ecryptfs-siirtomenettely

0. Disallow data migration and ARC.
   

   Registry Hive	HKEY_CURRENT_USER
   Registry Path	Software\Policies\Google\ChromeOS
   Value Name	EcryptfsMigrationStrategy
   Value Type	REG_DWORD
   Value	0

1. Migrate automatically, don’t ask for user consent.
   

   Registry Hive	HKEY_CURRENT_USER
   Registry Path	Software\Policies\Google\ChromeOS
   Value Name	EcryptfsMigrationStrategy
   Value Type	REG_DWORD
   Value	1

2. Wipe the user’s ecryptfs home directory and start with a fresh ext4-encrypted home directory.
   

   Registry Hive	HKEY_CURRENT_USER
   Registry Path	Software\Policies\Google\ChromeOS
   Value Name	EcryptfsMigrationStrategy
   Value Type	REG_DWORD
   Value	2

3. Similar to Wipe (value 2), but tries to preserve login tokens so the user does not have to sign in again.
   

   Registry Hive	HKEY_CURRENT_USER
   Registry Path	Software\Policies\Google\ChromeOS
   Value Name	EcryptfsMigrationStrategy
   Value Type	REG_DWORD
   Value	4