You open the Encryption agent configuration dialog from a workflow configuration: you can right-click the agent icon and select Configuration..., or double-click the agent icon.
The Encryptor Encryption agent configuration
The agent can be set to either decrypt or encrypt data, and if you select to unmask data you can select if you want to handle empty data or not.
...