Educause Security Discussion mailing list archives

Re: Laptop Encryption


From: Gary Dobbins <dobbins () ND EDU>
Date: Tue, 17 Feb 2009 20:21:04 -0500

We licensed Utimaco's product specifically because of its exceptionally good options for handling key escrow, scaling 
to large audiences, and safe access recovery mechanism for users who are occasionally located remotely from the Help 
Desk.

The products all encrypt properly; the key product differentiator is in how they help you handle access exceptions and 
problems.


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Timothy Payne
Sent: Tuesday, February 17, 2009 8:06 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Laptop Encryption

Good Evening...

We are starting to investigate enterprise encryption on College
laptops, and eventually removeable drives.

Can anyone share with the list their experiences with enterprise level
encryption products?  I'm most interested in products that use some
sort of 2-factor authentication...ie, a USB key required to boot and a
password, or password/checksum combo.

How do you deal with the inevitable user who loses their token or
forgets their password?

I've looked at Tru-Crypt and it does a really good job for me, but I
don't think it will scale well to more than a handful of users.

Thanks!



Tim Payne, CISSP, CCNA
Network Administrator
Macalester College

Current thread: