Whole Disk Encryption - suggestions?
- Thread starter ajf
- Start date
Thank you for the many responses. Sorry if I got the wrong forum initially. As it was desktop related I just put in Windows software.
Bitlocker would work but it is for the company I work for and we don't use Vista at all and Windows 7 will be a while before it is common place. It doesn't need TPM to work for others looking at that though from the trials I did.
Nothing wrong with PGP J.B just want to see what other options are available. I will look at Checkpoint although as we use Dell quite heavily might need caution there!
Not decided at this point whether to roll out a server controlled solution or stick to individual installs. Many of the PCs to be encrypted are rarely/ever on the main network.
PGP were pointing us to their Universal Server product with Full Disk Encryption which works with AD etc etc.
As always costs is an issue!
Andrew
Bitlocker would work but it is for the company I work for and we don't use Vista at all and Windows 7 will be a while before it is common place. It doesn't need TPM to work for others looking at that though from the trials I did.
Nothing wrong with PGP J.B just want to see what other options are available. I will look at Checkpoint although as we use Dell quite heavily might need caution there!
Not decided at this point whether to roll out a server controlled solution or stick to individual installs. Many of the PCs to be encrypted are rarely/ever on the main network.
PGP were pointing us to their Universal Server product with Full Disk Encryption which works with AD etc etc.
As always costs is an issue!
Andrew
To be honest that was my thought.
They were recommending it on the basis if it is used with AD you can silently push out the software to the machines and encrypt, plus centrally backup and manage the encryption keys.
We don't have a central update system so that part of it is not much help for us anyway.
I can see the advantage of the keys being managed although we initally thought of having the same passphrase for all machines for simplicity and user friendliness.
They were recommending it on the basis if it is used with AD you can silently push out the software to the machines and encrypt, plus centrally backup and manage the encryption keys.
We don't have a central update system so that part of it is not much help for us anyway.
I can see the advantage of the keys being managed although we initally thought of having the same passphrase for all machines for simplicity and user friendliness.