Re: Encrytped USB Key quick win solution‏

[mojorising <moj0rising () aim com>]

I've done a bit of checking around on this in the past couple of
months and I would say FreeOTFE is probably your best option for
Windows users, though I haven't used it myself. As a Linux user, I
started using LUKS (the technology behind FreeOTFE) to encrypt my USB
drive and it works great. You can even set aside a non-encrypted
partition if you wish.

Mac users can use LUKS too -- just like I do from my Linux machine.
When the same USB drive is inserted into a Windows machine, you can
use FreeOTFE (which would reside on the USB stick itself) to unlock
and access it. You probably already know FreeOTFE isn't exactly an
encryption application on it's own but rather a GUI front-end for
LUKS.

There are a few handy resources available on the web for setting all
this up, of course. A quick Google search such as
http://www.google.ca/search?q=luks+usb can get you started.

Good luck,
Mike



On 05/10/2009, Steve Freeman <freema2 () bellsouth net> wrote:
> I have been in the position of a limited budget for a particular fiscal
> year
> and negotiated with a vendor a cost for the current year that my company
> could swallow followed with a contract for the next year to complete the
> amount needed. This allowed me to implement the solution I wanted for the
> enterprise only once and with the product that fit best. This kept me from
> implementing one product now followed with another product in the next
> fiscal year. Discuss this with the vendor you want to work with and see if
> they can arrange a two part contract for the same product. This will save
> you an enormous amount of work and ensure you are their customer. A win-win
> proposal if you can work it out. Many vendors can accommodate this type of
> sale.
>
> Steve
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On
> Behalf Of Paul Deasy
> Sent: Saturday, October 03, 2009 7:29 AM
> To: Secure Net
> Cc: security-basics () lists securityfocus com
> Subject: Re: Encrytped USB Key quick win solution‏
>
> HI,
>
> Have you looked at Device Control, by Lumension ?
> <http://www.lumension.com/data-protection/>
> In my opinion, it's a very good product. (From my view point as an
> administrator of the product).
>
> Though when you say you have a limited budget, you could always talk
> with a reseller, and try to negotiate a discount for a volume order. I
> can PM you the name of our reseller, (UK based),  who I have found to
> be very good with pricing on the various security systems we have
> bought.
>
> PD
>
> 2009/9/30 Secure Net <secure.net () live ca>:
> > Hi,
> >
> > I'm working in a large enterprise that will look next year for an
> "enterprise class solution" that can handle all the life cycle of USB key
> that use encryption.
> > But now, we have to find a quick win solution that we can put in
> production shortly with a limited budget.
> > I personally used Truecrypt for several years but here the reason why I
> don’t want to use it for an enterprise solution:
> > 1-If the user lost the password of his USB key, you are dead
> > 2-If the user go on a computer that don't already have Truecrypt
> installed, you need administrative privilege
> > I did some search and I tried FreeOTFE (http://www.freeotfe.org/)
> >
> > It does what I wanted to:
> >
> > 1-Technical Support will be able to create a backup key before giving the
> USB key to the user. So they will be able to recover the data if the user
> lost his password.
> > 2-There is a utility called FreeOTFE Explorer that can open the encrypted
> volume on the USB Key in the case you don't have administrative privilege
> on
> the computer. The app is not very quick but it seems to do the job.
> > My question is: Did someone had any bad experience with this app? If yes,
> did you find a better one that did the things I mentioned before and was
> working fine?
> > Thanks
> >
> > JEP
> > _________________________________________________________________
> > Avec Windows Live, vous gardez le contact avec tous vos amis au même
> endroit.
> > http://go.microsoft.com/?linkid=9660830
> >
> > ------------------------------------------------------------------------
> > Securing Apache Web Server with thawte Digital Certificate
> > In this guide we examine the importance of Apache-SSL and who needs an
> > SSL
> certificate.  We look at how SSL works, how it benefits your company and
> how
> your customers can tell if a site is secure. You will find out how to test,
> purchase, install and use a thawte Digital Certificate on your Apache web
> server. Throughout, best practices for set-up are highlighted to help you
> ensure efficient ongoing management of your encryption keys and digital
> certificates.
> >
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
> d1
> > ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL
> certificate.  We look at how SSL works, how it benefits your company and
> how
> your customers can tell if a site is secure. You will find out how to test,
> purchase, install and use a thawte Digital Certificate on your Apache web
> server. Throughout, best practices for set-up are highlighted to help you
> ensure efficient ongoing management of your encryption keys and digital
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727
> d1
> ------------------------------------------------------------------------
>
>
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL
> certificate.  We look at how SSL works, how it benefits your company and how
> your customers can tell if a site is secure. You will find out how to test,
> purchase, install and use a thawte Digital Certificate on your Apache web
> server. Throughout, best practices for set-up are highlighted to help you
> ensure efficient ongoing management of your encryption keys and digital
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------