6.5 Roaming profiles The Embedded Security Subsystem is a very advanced system supporting many security settings and policies, including designating one system as a roaming server. Roaming profiles contain user configurations and settings that allow the user to roam from system to system within the network, be recognized as a valid user, and have access privileges to the applications to which the user is entitled, provided the server is available. By setting up a roaming server using Embedded Security Subsystem, the users will be able to log on to any machine in the network with their security passphrase and access all of the tools for which they have user privileges. For example, roaming profiles allows users to encrypt a file on one machine using the File and Folder protection tool and decrypt the file while roaming to another machine in the network. The user can copy this file over to a server, log on to another machine with the same credentials, copy the file to the second machine, and decrypt it with the File and Folder protection system. Note: It is important that you have some experience with the security chip before you start setting up the roaming server. The solution is easy to use, but a bit complex to set up the first time.