Re: PGP WDE

[Todd Clementz <clementz.7 () OSU EDU>]

We deployed 70ish in our department with the keys being managed by the upper
level IT on campus.  For the most part, it's pretty straightforward as far
as install.  The one time I needed a recovery key it was taken care of right
way with minimal downtime to the end user.  The area I was frustrated with
were specifically related to reboot which stuck on a greyscreen after a
nightly reboot, until the user came in the next time.  Sometimes this might
be a week or longer the machine doesn't respond to ping or install any
additional updates.  Also the area of password changing was a challenge.
There were times that the user might change their Windows password and it
not replicate to PGP which might require to use their previous password one
time the next reboot.  This just created confusion.  Other than that, it did
the job we needed it to.

Todd Clementz
Systems Engineer
Knowlton School of Architecture
The Ohio State University
614.292.8544


"Integrity is shown when no one is looking."


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of jeff murphy
Sent: Thursday, February 26, 2009 11:53 Hello Todd
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] PGP WDE

Related to the topic from earlier this week.

I'd like to hear from anyone who has deployed PGP Whole Disk
Encryption and/or NetShare along with Universal Server. We're looking
at a few options, one of which is PGP, and I'm looking for real-world
war stories regarding how your rollout and support went.  We're
looking at WDE for several hundred users, so the trial we did of a few
desktops doesn't really give us enough information to get a feel for
what the product will be like once deployed en masse.

thanks,

jeff