Skip to main content
Last updated: September 14, 2026tiCrypt 2.17.9

File Operations

File operations move data across the boundary between your Vault and a virtual machine's filesystem. The Vault holds individually encrypted files; a VM holds a mounted filesystem. Every transfer described here is a crossing between those two, and each crossing is a point where data changes custody.

Why the boundary exists​

The two sides encrypt differently. Vault files are encrypted individually and are decrypted when you download them. A drive is encrypted as a block device and is decrypted when it is mounted. There is no shared filesystem underneath, so data cannot appear on both sides on its own. It has to be transferred, and the transfer is where the re-encryption happens.

Crossing requires permission on both sides. A transfer needs the VM-level file transfer permission to start and the main-system Vault permission to complete. A user who is the Owner of a VM with full permissions inside it will still fail to write to the Vault if they lack the main-system permission to do so. The VM grants the ability to initiate the transfer; the main system gates whether it lands.

That is deliberate, not friction. Data leaving the enclave is exactly the event compliance regimes care about. Making it an explicit, doubly-gated action is what makes it auditable, and it is why there is no transparent sync between the Vault and a running machine.

Before you begin​

  • The VM is running and you can connect to it.
  • You have the File Transfer permission inside the VM.
  • You have the corresponding read or write permission in the Vault.

Transfer Files from a Virtual Machine into the Vault​

bulk-action

  1. Go to the Virtual Machines icon in the top left taskbar.
  2. Click the VMs section on the top left panel.
  3. In the left panel, click the virtual machine to transfer files from.
  4. Click the File Transfer option in the center.
  5. In the new window, drag-and-drop the files from the right panel (the virtual machine) to the left panel (the Vault).
  6. Once done, click Close.

Transfer Files from the Vault into a Virtual Machine​

bulk-action

  1. Go to the Virtual Machines icon in the top left taskbar.
  2. Click the VMs section on the top left panel.
  3. In the left panel, click the virtual machine to transfer files to.
  4. Click the File Transfer option in the center.
  5. In the new window, drag-and-drop the files from the left panel (the Vault) to the right panel (the virtual machine).
  6. Once done, click Close.
Confirmations, Errors & Solutions
File Transfer Button is Inactive in Virtual Machine

The File Transfer button is inactive in the Virtual Machines' right panel.

Ask VM Files Permissions from VM Owner

Ask the VM owner to allow you to access the VM Files section.



To Virtual Machine Owner
To allow VM users permissions to VM Files:  
  1. In the VMs section, click the virtual machine where you want to update a user's file permissions.
  2. Click the VM Settings and Details option in the bottom center.
  3. In the new window, select the Users section in the left panel.
  4. Next, select the appropriate user, then click the Open full menu button in the top-right panel.
  5. Select Edit user access.
  6. In the pop-up, set the profile to Custom.
  7. Scroll down under Permissions, and tick all the following permissions.
    • Files View/edit files.
    • VM to Vault Transfer Transfer file to tiCrypt Vault from VM.
    • Vault to VM Transfer Upload files to VM and create directories.
  8. Click Save.

Explore Files in a Virtual Machine​

  1. Go to the Virtual Machines icon in the top left taskbar.
  2. Click the VMs section on the top left panel.
  3. In the left panel, click the virtual machine whose files you want to explore.
  4. Click the File Explorer option in the center.
  5. Explore the drives and access directories of the virtual machine.
Confirmations, Errors & Solutions
File Explorer Button is Inactive in Virtual Machine

The File Explorer button is inactive in Virtual Machines' right panel.

Ask VM Files Permissions from VM Owner

Ask the VM owner to allow you to access the VM Files section.



To Virtual Machine Owner
To allow VM users permissions to VM Files:  
  1. In the VMs section, click the virtual machine where you want to update a user's file permissions.
  2. Click the VM Settings and Details option in the bottom center.
  3. In the new window, select the Users section in the left panel.
  4. Next, select the appropriate user, then click the Open full menu button in the top-right panel.
  5. Select Edit user access.
  6. In the pop-up, set the profile to Custom.
  7. Scroll down under Permissions, and tick all the following permissions.
    • Files View/edit files.
    • VM to Vault Transfer Transfer file to tiCrypt Vault from VM.
    • Vault to VM Transfer Upload files to VM and create directories.
  8. Click Save.

Perform an SFTP to VM Transfer from a Local Machine to a Virtual Machine​

bulk-action

  1. Go to the Virtual Machines icon in the top left taskbar.
  2. Click the VMs section on the top left panel.
  3. In the left panel, click the virtual machine to transfer files to.
  4. Click the SFTP to VM option in the center.
  5. In the pop-up, click Copy to copy the username, password, host, and port to your SFTP client.
info

For LFTP (a command-line file transfer client) or SSHFS transfers, visit the Remote File System section.