Centralized Encryption for Laptops

[FreshPrince]

Looking for an enterprise solution that will work with some sort of hardware encryption device that encrypts the whole hard drive.

prefer that this solution can be centrally managed/deployed with key management for rebuilds.

Thanks

 

[nweaver]

can't you do this with NTFS encryption and domains?

 

[FreshPrince]

Originally posted by: nweaver
can't you do this with NTFS encryption and domains?

looking for a solution that the laptop won't even boot up without a usb encryption token.

thx

 

[stash]

BitLocker in Vista will do this.

There are other products out there that do this, one I was looking at recently is ProtectDrive from SafeNet.

 

[FreshPrince]

I found one by kensington, but it's not "enterprise"

 

[FreshPrince]

ok, I tested the kensington pckey last night...

it's a pretty good product, but you can't centrally manage it.

 

[WackyDan]

To be honest....... Full hard disk encryption is going to be easier to manage without a token, and gives you the equivalent amount of security as long as the system has a TPM.

Look at Utimaco.

 

[Darthkim]

surprised no has mentioned this yet.

PGP with Whole Disk Encryption (plus you can get it with USB Token)

Allows admin recovery token and central management.

It works fairly well, pricey though...

 

[tyanni]

http://www.guardianedge.com/products/Encryption_Anywhere/Hard_Disk.html

how about this?

 

[Nothinman]

but it's not "enterprise"

Ah? So it's well designed and priced reasonably?

 

[FreshPrince]

Originally posted by: Nothinman

but it's not "enterprise"

Ah? So it's well designed and priced reasonably?

it's only $70, not sure about the well designed part...testing it some more today and it allowed me to change the local admin password. I still can't get to the data locally, but I'm shocked it allowed me to change the local admin password...

 

[Nothinman]

it's only $70, not sure about the well designed part...testing it some more today and it allowed me to change the local admin password. I still can't get to the data locally, but I'm shocked it allowed me to change the local admin password...

I was being facetious, IME whenever the term enterprise is tacked onto a piece of software it usually just means that the price gets quadrupled for no real reason.

 

[WackyDan]

Originally posted by: Nothinman

it's only $70, not sure about the well designed part...testing it some more today and it allowed me to change the local admin password. I still can't get to the data locally, but I'm shocked it allowed me to change the local admin password...

I was being facetious, IME whenever the term enterprise is tacked onto a piece of software it usually just means that the price gets quadrupled for no real reason.

I find it generally means that you can manage it. That costs $$ to develop and hence the cost.

 

[Nothinman]

I find it generally means that you can manage it. That costs $$ to develop and hence the cost.

Or that it's completely unmanagable, for instance one particular "enterprise" product from CA that we're looking into is really ~5 seperate products tied together with duct tape and no central management and requires redundant configuration in a few of the different parts.

 

[WackyDan]

Originally posted by: Nothinman

I find it generally means that you can manage it. That costs $$ to develop and hence the cost.

Or that it's completely unmanagable, for instance one particular "enterprise" product from CA that we're looking into is really ~5 seperate products tied together with duct tape and no central management and requires redundant configuration in a few of the different parts.

That's the problem with most systems management products... Features are added by aquisition.

I've found LanDesk to be the exception to that however. Very streamlined interface, and they offer a security suite that's pretty slick.

 

[Nothinman]

That's the problem with most systems management products... Features are added by aquisition.

s/systems management/closed source/