Whole Disk Encryption - suggestions?
- Thread starter ajf
- Start date
Man of Honour
- Joined
- 17 Nov 2003
- Posts
- 36,746
- Location
- Southampton, UK
Looks like you need a different forum 
Associate
- Joined
- 18 Oct 2002
- Posts
- 1,978
- Location
- Swindon
Sophos Endpoint does whole disk encryption.
Associate
- Joined
- 17 May 2004
- Posts
- 1,585
Check Point Full Disk Encryption.
Does whole disks only, will not do partitions or RAID Volumes.
Is what was PointSec PC but rebranded since Check Point purchased PointSec. Is now part of the Check Point End Point Security Suite.
Just don't use it with Dell Laptops as forums full of issues with different dell machines, either bios upgrades or settings need changing.
Does whole disks only, will not do partitions or RAID Volumes.
Is what was PointSec PC but rebranded since Check Point purchased PointSec. Is now part of the Check Point End Point Security Suite.
Just don't use it with Dell Laptops as forums full of issues with different dell machines, either bios upgrades or settings need changing.
Thank you for the many responses. Sorry if I got the wrong forum initially. As it was desktop related I just put in Windows software.
Bitlocker would work but it is for the company I work for and we don't use Vista at all and Windows 7 will be a while before it is common place. It doesn't need TPM to work for others looking at that though from the trials I did.
Nothing wrong with PGP J.B just want to see what other options are available. I will look at Checkpoint although as we use Dell quite heavily might need caution there!
Not decided at this point whether to roll out a server controlled solution or stick to individual installs. Many of the PCs to be encrypted are rarely/ever on the main network.
PGP were pointing us to their Universal Server product with Full Disk Encryption which works with AD etc etc.
As always costs is an issue!
Andrew
Bitlocker would work but it is for the company I work for and we don't use Vista at all and Windows 7 will be a while before it is common place. It doesn't need TPM to work for others looking at that though from the trials I did.
Nothing wrong with PGP J.B just want to see what other options are available. I will look at Checkpoint although as we use Dell quite heavily might need caution there!
Not decided at this point whether to roll out a server controlled solution or stick to individual installs. Many of the PCs to be encrypted are rarely/ever on the main network.
PGP were pointing us to their Universal Server product with Full Disk Encryption which works with AD etc etc.
As always costs is an issue!
Andrew
For just whole disk encryption I wouldnt bother putting a universal server in. It comes in to its own if you are encrypting emails but I cant really see why you'd want to centrally manage disk encryption. Once the disk is encrypted you are away!
Depends on the powers that be I guess and how many you are rolling out
Depends on the powers that be I guess and how many you are rolling out
To be honest that was my thought.
They were recommending it on the basis if it is used with AD you can silently push out the software to the machines and encrypt, plus centrally backup and manage the encryption keys.
We don't have a central update system so that part of it is not much help for us anyway.
I can see the advantage of the keys being managed although we initally thought of having the same passphrase for all machines for simplicity and user friendliness.
They were recommending it on the basis if it is used with AD you can silently push out the software to the machines and encrypt, plus centrally backup and manage the encryption keys.
We don't have a central update system so that part of it is not much help for us anyway.
I can see the advantage of the keys being managed although we initally thought of having the same passphrase for all machines for simplicity and user friendliness.
website said:
I love truecrypt, but I'm desperately waiting for them to implement more enterpris-y features such as centralised key recovery / master keys etc.