Re: Product request - Enterprise whole disk encryption for laptops

[Linda Pruss <pruss () DOIT WISC EDU>]

I'm testing Windows Vista bitlocker technology.  It will check for tampering of boot files and encrypt the system 
volume.  It prefers to work with a TPM 1.2 hardware module on the motherboard for key storage and tamper protection, 
but can also work without one (minus the boot file integrity checking).

Might be worth checking into depending on when exactly you need disk encryption ...

---Linda Pruss
University of Wisconsin--Madison

  ----- Original Message -----
  From: David Morton
  To: SECURITY () LISTSERV EDUCAUSE EDU
  Sent: Friday, July 14, 2006 3:31 PM
  Subject: Re: [SECURITY] Product request - Enterprise whole disk encryption for laptops


  While not whole disk encryption, we are in the process of looking at TrueCrypt (www.truecrypt.org) as a solution of 
encrypting volumes of data on laptops. True Crypt allows for key recovery and some other nice features.


  Does anyone have experience using True Crypt in a major way?


  Thanks


  David






  David Morton
  Director, Security Solutions
  Technology Engineering, C&C
  University of Washington
  dmorton () u washington edu
  http://staff.washington.edu/dmorton/blog
  tel 206.221.7814






  On Jul 14, 2006, at 12:36 PM, Youngquist, Jason R. wrote:


    I'm currently investigating whole disk encryption for laptops with
    confidential information.  In the event a user forgets his/her
    passphrase, we need a solution so administrators can retrieve the
    information off of the hard drive.


    So far, I've looked at PGP Whole Disk Encryption for Enterprises which
    looks quite promising, but I was wondering if anyone has come across
    other more cost-effective solutions which work well.


    Thanks.
    Jason Youngquist
    Network Security Analyst
    Technology Services
    Columbia College
    1001 Rogers Street, Columbia, MO  65216
    (573) 875-7334
    jryoungquist () ccis edu
    http://www.ccis.edu