Re: Encryption

[rcthampi () gmail com]

Hi,

If TPM is not there then you need the USB to boot the system. Managing the USB is another risk. From my experience, it 
is very difficult on laptops without TPM.
Regards

Sent from BlackBerry® on Airtel

-----Original Message-----
From: Archangel Amael <archangel.amael () gmail com>
Date: Tue, 13 Dec 2011 16:43:33 
To: <rcthampi () gmail com>
Cc: Gouife Atseng,Landry,DOUALA,IS/IT<Landry.GouifeAtseng () cm nestle com>; <security-basics () securityfocus com>
Subject: Re: Encryption

Hi,

No  Bitlocker does not need a TPM to work. A TPM chip will hold the
Bitlocker locked drives's own volume master key, but a USB drive can
be substituted to do the same thing if the BIOS supports reading from
a USB stick at boot time. This substitution of a USB key can be done
via GPO or through the use of a script. Suitable scripts, and GPO
templates can be found on Technet as well.

Perhaps the following will help explain Bitlocker a bit more for those
who care to read it.
http://windows.microsoft.com/en-US/windows-vista/BitLocker-Drive-Encryption-Overview
A bit more technical and thorough of course is the technet article on
Bitlocker,
http://technet.microsoft.com/en-us/library/ee449438(WS.10).aspx#BKMK_NoTPM

Regards,


On Tue, Dec 13, 2011 at 4:19 PM,  <rcthampi () gmail com> wrote:
> Hi,
>
> Bitlocker also need TPM enabled hardware.
>
> Regards
> Sent from BlackBerry® on Airtel
>
> -----Original Message-----
> From: "Gouife Atseng,Landry,DOUALA,IS/IT" <Landry.GouifeAtseng () CM nestle com>
> Sender: listbounce () securityfocus com
> Date: Tue, 13 Dec 2011 11:50:05
> To: Archangel Amael<archangel.amael () gmail com>
> Cc: <security-basics () securityfocus com>
> Subject: RE: Encryption
>
> Thanks Amael
>
> -----Message d'origine-----
> De : Archangel Amael [mailto:archangel.amael () gmail com]
> Envoyé : mardi 13 décembre 2011 12:20
> À : Gouife Atseng,Landry,DOUALA,IS/IT
> Cc : security-basics () securityfocus com
> Objet : Re: Encryption
>
> Hi,
>
>   Bitlocker while not open source will better integrate into Active
> Directory than Truecrypt.  If you have a couple of users (or
> computers) that you are wanting to encrypt, and want a quick solution,
> then Truecrypt would likely be the better option. If however you are
> looking for more integrated support with AD, and have some time to
> read some tutorials, or documentation, you can better fine tune
> Bitlocker.
>  Both programs can be used on external storage devices, as well as
> internal.  Another advantage of Bitlocker is the password for it
> changes when a user needs, or is forced (via GPO, etc.) to change
> their domain password. This also means less likely hood for a user to
> forget a password, since they are essentially using one set of
> credentials.  A disadvantage to Bitlocker is the need for Windows 7
> Ultimate of Enterprise editions however.
>
>
> Regards,
>
> On Mon, Dec 12, 2011 at 4:02 PM, Gouife Atseng,Landry,DOUALA,IS/IT
> <Landry.GouifeAtseng () cm nestle com> wrote:
> > Hi paul,
> >
> > Please in the same way, can you help me to have open source to encrypt files in external drive.
> >
> > Thanks
> >
> > -----Message d'origine-----
> > De : listbounce () securityfocus com [mailto:listbounce () securityfocus com] De la part de Soumen Paul
> > Envoyé : mardi 19 avril 2011 16:53
> > À : drmarkabaiter () gmail com
> > Cc : Kenneth Gonzalez; security-basics () securityfocus com
> > Objet : Re: Encryption
> >
> > Can try sophos safeguard enterprise. That works well with AD integrated role based policy
> >
> >
> >
> >
> >
> > On 15 Apr 2011, at 04:55 PM, David Weise <dweise () rider edu> wrote:
> >
> > > hi,
> > >  Well there is always bitlocker.  Or TrueCrypt but this does not integrate with AD.
> > > http://windows.microsoft.com/en-US/windows7/products/features/bitlocker
> > >
> > > On 4/12/2011 12:49 PM, Kenneth Gonzalez wrote:
> > > > Hi, i want to implement a simple system to encryp Office files, like Docx, XLSX adn PPTX, and i need to integrate 
> > > > this encryption system with Active Directory.
> > > >
> > > > i dont wanto to implement Active Directory RMS, hopefully a open Source or another third party solution. Do you 
> > > > know something like that... thanks
> > >
> > > ------------------------------------------------------------------------
> > > Securing Apache Web Server with thawte Digital Certificate
> > > In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> > > how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> > > purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> > > set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> > > certificates.
> > >
> > > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> > > ------------------------------------------------------------------------
> >
> > ------------------------------------------------------------------------
> > Securing Apache Web Server with thawte Digital Certificate
> > In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> > how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> > purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> > set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> > certificates.
> >
> > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> > ------------------------------------------------------------------------
> >
> >
> > ------------------------------------------------------------------------
> > Securing Apache Web Server with thawte Digital Certificate
> > In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> > how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> > purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> > set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> > certificates.
> >
> > http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> > ------------------------------------------------------------------------
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------