Re: Product request - Enterprise whole disk encryption for laptops

[James H Moore <jhmfa () RIT EDU>]

EFS is not very strong, at present.  Elcomsoft has a data recovery tool.

 

Jim

- - - -
Jim Moore, CISSP, IAM
Information Security Officer
Rochester Institute of Technology
13 Lomb Memorial Drive
Rochester, NY 14623-5603
(585) 475-5406 (office)
(585) 475-4122 (lab)
(585) 475-7950 (fax)

"We will have a chance when we are as efficient at communicating
information security best practices, as hackers and criminals are at
sharing attack information"  - Peter Presidio




________________________________

From: Harold Winshel [mailto:winshel () CAMDEN RUTGERS EDU] 
Sent: Friday, July 14, 2006 11:46 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Product request - Enterprise whole disk
encryption for laptops

 

We've recently looked at a number of encryption utilities and, from the
ones we've examined,  they basically fall into one of three price
categories: those that are free, those that cost $30 - 60 per license,
and those that are $100+ per license.

One of our prime objectives is to protect data on windows notebook
computers that get lost or stolen.

We're considering using windows efs to encrypt sensitive data stored on
internal hard drives and using truecrypt for sensitive data stored on
flash drives, external hard drives, cd's, etc.

We haven't brought truecrypt into production yet but have yet to find
much of anything in the way of serious criticism of it.  And it happens
to be free.

Harold


At 04:31 PM 7/14/2006, David Morton wrote:



While not whole disk encryption, we are in the process of looking at
TrueCrypt (www.truecrypt.org) as a solution of encrypting volumes of
data on laptops. True Crypt allows for key recovery and some other nice
features.

Does anyone have experience using True Crypt in a major way?

Thanks

David



David Morton
Director, Security Solutions
Technology Engineering, C&C
University of Washington
dmorton () u washington edu
http://staff.washington.edu/dmorton/blog
tel 206.221.7814



On Jul 14, 2006, at 12:36 PM, Youngquist, Jason R. wrote:




I'm currently investigating whole disk encryption for laptops with
confidential information.  In the event a user forgets his/her
passphrase, we need a solution so administrators can retrieve the
information off of the hard drive.

So far, I've looked at PGP Whole Disk Encryption for Enterprises which
looks quite promising, but I was wondering if anyone has come across
other more cost-effective solutions which work well.

Thanks.
Jason Youngquist
Network Security Analyst
Technology Services
Columbia College
1001 Rogers Street, Columbia, MO  65216
(573) 875-7334
jryoungquist () ccis edu
http://www.ccis.edu <http://www.ccis.edu/>  

Harold Winshel
Computing and Instructional Technologies
Faculty of Arts & Sciences
Rutgers University, Camden Campus
311 N. 5th Street, Room B36 Armitage Hall 
Camden NJ 08102
(856) 225-6669 (O)