Merge branch 'jt-update-cryptomator-documentation' into 'master'

update cryptomator card

See merge request R3/howto-cards!571

external/exchange-channels/cryptomator/cryptomator.md

@@ -17,22 +17,27 @@ Cryptomator is a cloud cryptor - a tool allowing to work on and to share encrypt
 
 Cryptomator protects your data by ingesting it in a so-called vault, which is mounted to a virtual drive and password protected. To access and view the data, you must unlock the vault with the created password. The data is stored on the cloud of your choice when creating the vault, but is encrypted automatically by the Cryptomator client. It is only from the virtual drive which act as a USB flash drive that you can access and view the data, as it shows the decrypted view of its content. Ingesting your files directly into the virtual drive permits Cryptomator to automatically encrypt the data with AES and 256-bit key length. 
 
-Please follow the below sections to: download Cryptomator locally on your computer, enable Cryptomator on your preffered cloud, or manage vaults as an administrator. Please visit Cryptomator’s official website for the full documentation on [vault management](https://docs.cryptomator.org/en/latest/). 
+This How-to Card provides a guide on the below topics. For the full documentation on using Cryptomator, please visit the [official website](https://docs.cryptomator.org/en/latest/). 
+- [Download Cryptomator Desktop](#downloading-cryptomator-desktop)
+- [Setting up Cryptomator Hub](#setting-up-cryptomator-hub)
+- [Vault management](#vault-management) 
+- [Collaborating on a shared vault as a user](#collaborating-on-a-shared-vault-as-a-user)
 
 `Note:` Cryptomator does not offer cloud storage but adds an extra protection to your data stored on the cloud by automatically encrypting the files in the vault. 
 
-## Downloading Cryptomator Desktop
+## Downloading Cryptomator Desktop 
 The desktop version of Cryptomator is available both for macOS, Windows, and Linux. Please follow the [guide](https://docs.cryptomator.org/en/latest/desktop/setup/) on Cryptomator's official website to install the application on your operating system. 
 
  <img src="img/cryptomator-main.png" height="400px"><br>
 
-## Setting up key management system with Cryptomator Hub
- Cryptomator Hub adds key and access management to your vaults from a central component deployed on your infrastructure, permitting collaborative work. As an admin, you can share your vaults with other people, who can access the vault by authenticating with Keycloak. There is thus no need for creating new accounts nor sharing encryption passwords with collaborators which are easily stolen, copied, or misused, and no data is shared on any online services. 
+## Cryptomator Hub
+ Cryptomator Hub adds key and access management to your vaults from a central component deployed on your infrastructure, permitting collaborative work. As an owner/administrator of a vault, you can share your vaults with other people, who can access the vault by authenticating with Keycloak. There is thus no need for creating new accounts nor sharing encryption passwords with collaborators which are easily stolen, copied, or misused, and no data is shared on any online services. 
 
 As a vault administrator it is important to manage the admin password properly. In case you lose or forget the admin password, a recovery key is needed to restore access to the vault. This recovery key is generated upon creating the vault (see guide below). In practical, it is the responsibility of the project manager and/or PI to manage and store the admin vault password securely. Please use passphrase and proper password management when creating the admin vault password. For further information, visit the How-to Card on [password management]( https://howto.lcsb.uni.lu/?access:passwords). 
 
-## Enabling Cryptomator using a cloud of your choice
-1. Go to the LCSB instance of Cryptomator Hub https://lcsb.cryptomator.cloud/.
+## Setting up Cryptomator Hub
+**Prerequisite:** A Cryptomator license is required to use Cryptomator Hub and can be requested via the [Service Portal](https://service.uni.lu/sp?id=sc_cat_item&sys_id=d3766892db3fa010ca534540399619a8&sysparm_category=735620d2db3fa010ca53454039961940). 
+1. Go to the LCSB instance of [Cryptomator Hub](https://lcsb.cryptomator.cloud/).
 2. Click on “LCSB Login”. 
 
     <img src="img/cryptomatorHub-login.png" height="400px"> <br>
@@ -41,7 +46,7 @@ As a vault administrator it is important to manage the admin password properly.
 
     <img src="img/uni-login.png" height="400px"> <br>
 
-4. When signed in successfully, you will be presented with the Hub's main page. To create a new vault, click the “Add” button on the top left corner and then "create new". 
+4. When signed in successfully, you will be presented with the Hub's main page. To create a new vault, click the “Add” button on the top right corner and then "create new". 
 
     <img src="img/hub-mainpage.png" height="350px"> <br>
 
@@ -49,20 +54,20 @@ As a vault administrator it is important to manage the admin password properly.
 
     <img src="img/creating-vault.png" height="350px"> <br>
 
-6. A recovery key is displayed on the page. Copy the recovery key and store it in a safe location (e.g. password management system). The recocery key is needed for restoring access to the vault data. Tick the checkbox and click “Create Vault”. 
+6. A recovery key is displayed on the page. Copy the recovery key and store it in a safe location (e.g. password management system like [Bitwarden](https://bitwarden.com/) or [Keepass](https://keepass.info/)). The recocery key is needed for restoring access to the vault data. Tick the checkbox and click “Create Vault”. 
 
     <img src="img/recovery-key.png" height="350px"> <br>
 
-7. The vault has now been successfully created from the Hub. Click “download zipped vault folder”. 
+7. The vault has now been successfully created from the Hub. You can now mount the vault to your desired cloud storage location by clicking “download zipped vault folder”. 
 
     <img src="img/download-vault-template.png" height="350px"> <br>
 
-8. Unzip the vault in your preferred cloud storage location (e.g., ownCloud or OneDrive). 
+8. Unzip the vault in the cloud storage location (e.g. ownCloud or OneDrive). 
 
     <img src="img/ownCloud-folder.png" height="300px"> <br>
 
-## Managing a vault as an administrator
-The following steps can only be performed by the vault administrator. 
+## Vault management
+The following steps shows how to share a vault with other people and can only be performed by the vault administrator.
 
 1. From the Hub's main page, click on the vault you wish to share and then "Manage vault". 
 
@@ -76,12 +81,10 @@ The following steps can only be performed by the vault administrator.
 
     <img src="img/add-member.png" height="450px"> <br> 
  
-4. The team member has to register their local device to the shared vault (see next section). Once the device of the user has been registered to the vault, the admin can grant access by clicking on “update permission”. 
+4. Before the user can access your vault, the user has to register the vault to the user's local device (see section "Collaborating on a shared vault as a user). Only then can the vault administrator grant permission by clicking on “update permission”. 
 
     <img src="img/grant-access.png" height="150px"> <br>
 
-5. Once access is granted, the team member can unlock the vault locally. 
-
 ## Collaborating on a shared vault as a user
 1. Open the desktop application. Click the “add’ button and then “Existing vault”. 
 
@@ -101,15 +104,15 @@ The following steps can only be performed by the vault administrator.
 
 5. Cryptomator will automatically redirect you to the login page. Please authenticate yourself with Keycloak.
 
-6. If it is the first time you connect your device to the shared vault, you have to register the device. In this case, you will be prompt to enter a device name and then click "Confirm. The admin can now grant access to the device. 
+6. If it is the first time you connect your device to the shared vault, you have to register the device. In this case, you will be prompt to enter a device name and then click "Confirm". The admin can now grant access to the device. 
 
    <img src="img/register-device.png" height="200px"> <br> 
 
-7. Once the admin grants access the vault is unlocked. Click “Reveal drive” to access the vault on the virtual drive. 
+7. Once the admin grants access, click “Reveal drive” to access the vault on the virtual drive. 
 
    <img src="img/unlock-vault.png" height="400px"> <br> 
 
-8. All data can now be ingested in the vault on the virtual drive.
+8. You can now view decrypted data and save files in the vault on the virtual drive.
 
     <img src="img/vault-data.png" height="400px"> <br>