Full laptop encyption ?

[Snow-Munki]

Hi,

Just started looking at how to get all and every file on a laptop encrypted ?

If not possible to mark certain folders secure. Reason being we have a lot of users that go out of the office and work and concerned that their laptops might be stolen,

Thanks.

 

[Rob7865]

If the laptops are Vista Business / Ultimate look at setting up Bitlocker - this encrypts the whole drive and not just the files / folders.

ttfn
Rob

 

[Bakedgoods]

BeCrypt

 

[growse]

Truecrypt for open source goodness.

 

[Burnsy2023]

Bitlocker if on Vista, truecrypt if not.

 

[knowlesy]

Truecrypt for open source goodness.

agreed !!

 

[jas72]

how do you do the whole laptop can you actually stop the os from loading until you enter a password? If so I'm interested I have already done my data drives.

 

[Rob7865]

how do you do the whole laptop can you actually stop the os from loading until you enter a password? If so I'm interested I have already done my data drives.

In Vista Bitlocker will encrypt the whole Drive and the security token can be stored on a USB Flash drive. Without the USB Drive the Laptop will not boot.

Rob

 

[Red_knight]

We've implemented McAfee endpoint at work which is total drive encryption (pre-boot), but it's a total nightmare from a support PoV.

 

[Bakedgoods]

BeCrypt requires a password to be entered as soon as you boot the laptop. It encrypts the entire hard drive.

 

[tom_e]

how do you do the whole laptop can you actually stop the os from loading until you enter a password? If so I'm interested I have already done my data drives.

Truecrypt does this it uses its own boot manager so you need to enter your key before you see windows

 

[Seaniboy]

PointSec is another

 

[chaosophy]

Our company uses safeboot.

No idea how it compares to the others listed here but thought I'd throw it in as another option you could look at.

 

[Red_knight]

Our company uses safeboot.

No idea how it compares to the others listed here but thought I'd throw it in as another option you could look at.

This is the same as McAfee endpoint.

 

[Snow-Munki]

Thanks guys !

A few issues though. All laptops are still Windows XP amd we're nowhere close to using vista yet . Only recently upgraded from 2000

Second, all our users only have user rights, not sure if this causes a problem ?

 

[knowlesy]

truecrypt should be fine with this .... just you may have to use a lesser encryption just like aes instead of aes doubler triple whatever ... in which truecrypt offers lol as it can hammer cpu and hdd time to encrypt and de crypt

 

[FrankJH]

PointSec is another

Checkpoint / PointSec here too, desktops and laptops - desktops authenticate with AD and while being encrypted dont pause at the pointsec boot up screen, while laptops have different user credentials here also

just causes issues with ghosting which I have to look into some time

 

[Blackbadger]

I have a dell d630 atg it has hd encryption via the bios, a smartcard reader (creditcard type with chip), and fingerprint login.
built in gps and a built in sim card.

If stolen/lost you can have the data remotely terminated on the hard drive.
Also it can be tracked if you fancy getting it back (via gps/the internal mobile internet/or via a connected isp via lan).

The chances of anyone getting your data are seriously limited.


Complete overkill for my needs

I got the laptop because of it's sturdiness/gps/ineternet/and awesome screen. However no laptop (well the panasonic toughbooks) come close to the security and included features. As everything is integrated, it all works out of the box. If you are serious about being worried about laptops going missing. I'd solve it properly and get something similar.