Encryption

Associate
Joined
7 Aug 2012
Posts
949
Hi All,

Got a bit of an odd scenario.

We have a third party company which will be collecting some machines from us with our company specific software on them.

What I'm wanting to do is somehow encrypt the files which they'll need without needing to give them the password to unlock/decrypt them, or give them the function to export the key.

Anyone got any ideas?
 
I do not understand, you want to encrypt the files they need but not supply them with
a password to decrypt these .. how could they access them then ?
[I have created self decrypting executables where you telephone the recipient with the
password .. but I do not think you want that]
 
I can lock the PC's down in terms of windows permissions, however there wouldn't be anything stopping someone using a Linux boot CD and bypassing those, hence the encryption.

I think I've found a small work around for now anyways.
 
A little crude, but could you use bitlocker and just encrypt the entire drive?

We're using Windows 7 Pro so that's not available and from my understanding, in order to access the PC you need to enter some sort of Pin/Password at boot to allow you into windows. Using that, it would allow the third party to decrypt everything..
 
You don't have to enter a pin/password, it can all be done through TPM. It depends what the situation is going to be with admin on those systems after they've moved I suppose! Regardless, Pro does indeed rule it out.
 
I've spoken with our IT dept who say that they have some Enterprise keys, so we might be able to go down the enterprise route and use bitlocker. We'll be using Dell 7010/7020's which come with TPM so looks like bitlocker might be a possibility after all
 
Back
Top Bottom