Configuring Zip Files and Zero Trust File Sharing

Users can create and upload zip files into their My Files and Network Shares folders, and then preview, download, add, and delete contents of these zip files. 

When users create Zip files within FileCloud, they may add a password to them to create them as encrypted Zero Trust folders The password (decryption key) must be entered by the user who created the zip file or anyone they share the file with to access it. Note that the decryption key is not stored in FileCloud or known by the FileCloud system, and therefore makes the file invulnerable to attacks where the system is compromised.

For information about how users add and work with zip files, see Working with Zip Files.

By default, after the password is entered the first time during a log-in session, it does not have to be entered again during that session, but a setting in policies enables you to require users to enter the password each time they access it during a session.

To enable the zip file feature

By default, the zip file feature described above is disabled. To make it available to users, enable it in the FileCloud configuration file.

1. Open cloudconfig.php at

   • Windows: XAMPP DIRECTORY\htdocs\config\cloudconfig.php

   • Linux: /var/www/config/cloudconfig.php

2. Locate the setting:

   define("TONIDOCLOUD_ZIP_FOLDER_ENABLE", false);

3. Change the value of TONIDOCLOUD_ZIP_FOLDER_ENABLE from false to true:

   define("TONIDOCLOUD_ZIP_FOLDER_ENABLE", true);

   The zip feature is now enabled for users. To disable it, change the value for TONIDOCLOUD_ZIP_FOLDER_ENABLE back to false.

Zip File Settings

The following are default settings for zip files. These may be modified in the FileCloud configuration file.

To open the configuration file:

1. Open cloudconfig.php at

   • Windows: XAMPP DIRECTORY\htdocs\config\cloudconfig.php

   • Linux: /var/www/config/cloudconfig.php

2. Use the following steps to change any of the settings:

To change the encryption method:

1. 1. Locate the setting:

      define("TONIDOCLOUD_ZIP_FOLDER_ENCRYPTION_METHOD", 1);

   2. Change the value to one of the following:

      Value	Definition
      0	PKWARE
      1 (default)	WinZip AES-256 Note: WinZip AES256 encryption works in Windows only with 7-Zip, winRAR, and WinZip third party compression software. Use PKWARE as an alternative.
      2	WinZip AES-128
      3	WinZip AES-192

To change the compression level:

1. 1. Locate the setting.

      define("TONIDOCLOUD_ZIP_FOLDER_COMPRESSION_LEVEL", 5); 

   2. Change the value to one of the following:

      Value	Definition
      1	Super fast
      2	Fast
      5 (default)	Normal
      9	Maximum

To change the compression method:

1. 1. Locate the setting.

      define("TONIDOCLOUD_ZIP_FOLDER_COMPRESSION_METHOD", 8); 

   2. Change the value to one of the following:

      Value	Definition
      0	Stored
      8 (default)	Deflated

To change the fallback character set:

1. 1. Locate the setting.

      define("TONIDOCLOUD_ZIP_FOLDER_CHARSET_FALLBACK", null);

   2. Change the value to one of the following:

      Value	Definition
      GREEK	cp737
      BALT_RIM	cp775
      LATIN1	cp850
      LATIN2	cp852
      CYRILLIC	cp855
      TURKISH	cp857
      PORTUGUESE	cp860
      ICELANDIC	cp861
      HEBREW	cp862
      CANADA	cp863
      ARABIC	cp864
      NORDIC	cp865
      CYRILLIC_RUSSIAN	cp866
      GREEK2	cp869
      THAI	cp874

To change the max file size:

1. 1. Locate the setting:

      define("TONIDOCLOUD_ZIP_FOLDER_MAX_FILE_SIZE", "100");

      The value is given in MB.

   2. You can change the value to any number, but the maximum size of zip files supported in FileCloud is 4 GB (4000 MB) so any value higher than 4000 defaults to a maximum file size of 4000 MB.

To require the password each time an encrypted zip file is accessed:

1. In the admin portal, go to Settings > Policies, and open the policy you want to change.
2. Click the User Policy tab:
   
3. Scroll down to the bottom of the tab.
   By default Save Zip File Session Password is set to Yes. This enables users to enter the password once per log-in session to access the contents of the zip file.
4. Change the value of Save Zip File Session Password to No.
   
5. Click Save.
   Now users must enter the password each time they access the contents of the zip file.

Permissions in shared zip files

When a zip file is shared publicly, share users can view the contents of the zip file and download them. When a zip file is shared privately, the operations that share users can perform on its contents depends on their share permissions.

The following table shows what each share permission allows share users to do with the contents of a zip file