Educause Security Discussion mailing list archives

Re: SecureDoc Encryption for Macs


From: "Pebby Garner (Information Security)" <pebby.garner () UTSA EDU>
Date: Fri, 4 Mar 2011 07:39:04 -0600

Alex,

Last year when I was looking for an encryption solution for Macs,
TrueCrypt did not meet our needs because it did not have pre-boot
authentication for the Mac.  It was folder encryption and we were not
willing to depend on our users to know what files needed to be
encrypted.  I have not taken a look at any of the newer versions of
TrueCrypt.

 

We bought SecureDoc because it was cheaper than PGP and the vendor said
that it would be supported on Bootcamp.  During testing and
installation, that's when I found out that the drive had to be
self-encrypting in order for the product to be supported.

 

Thank you, 
Pebby Garner 

Office of Information Security

The University of Texas at San Antonio

One UTSA Circle 

San Antonio, TX 78249 

Phone: 210-458-7801

email: Pebby.Garner () utsa edu

 

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Brewer, Alex D
Sent: Friday, March 04, 2011 7:26 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] SecureDoc Encryption for Macs

 

I apologize if I'm repeating something that may have already been
discussed.  Has anyone attempted using TrueCrypt with Boot camp,
Parallels or  Virtual Box on a MAC.  The solution in the last tread is
quite simple, but does TrueCrypt handle the different OS with the same
key or a separate key, what are the pros and cons of for this solution.
Thanks in advance for your responses.

 

Alex Brewer

Network Specialist

Technology Services

University of Montevallo

brewerad () montevallo edu

 

 

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Tonkin, Derek K.
Sent: Thursday, March 03, 2011 3:51 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] SecureDoc Encryption for Macs

 

We have quite a few folks running PGP WDE on bootcamped Macs (bootcamped
with Windows, not Linux although that might work as well).  To say the
process is complicated when you are talking about a machine that is
already set up to dual-boot is over the top in my opinion.  All you have
to do is boot into Windows, install, restart into Mac, install, restart
into Mac again and enroll and encrypt.  I typically advise the users to
allow the encrypt to complete before going back to Windows but once the
initial disk instrumentation is done it really shouldn't matter.  When
you consider that this is a user who is already accustomed to a
dual-boot environment I don't think the PGP setup is that onerous.

 

-------------Baylor University-------------

Derek Tonkin

Information Security Analyst

Information Technology Services - Security

derek_tonkin () baylor edu        254-710-7061

---------------Sic 'em Bears---------------

 

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Chris Green
Sent: Thursday, March 03, 2011 2:20 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] SecureDoc Encryption for Macs

 

PGP WDE theoretically let it work in a complicated "install PGP in
bootcamp windows, install pgp in mac, copy stuff from NTFS partition
using unnamed product, and pray"

 

We declared it a non-supported scenario and told them to buy vmware or
parallels to run Windows stuff.   The only places where we had hard
bootcamp requirements ended up being places like physics labs where they
filled out exceptions since there wasn't any sensitive data to protect
in the first place.

 

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Pebby Garner
(Information Security)
Sent: Thursday, March 03, 2011 1:38 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] SecureDoc Encryption for Macs

 

Hello all,

I am hoping someone can help me.  I work at The University of Texas at
San Antonio.  We are in the midst of encrypting all university-owned
laptops under a mandate from our president.  We have bought SecureDoc to
encrypt the Mac laptops on campus but most (over 80%) of our laptops
have BootCamp installed on them.  According to WinMagic, Inc., they will
not support SecureDoc on a dual boot Mac laptop unless there is a
self-encrypting hard drive installed on the laptop.  My question is has
anyone successfully encrypted a Mac laptop with BootCamp that does not
have a self-encrypting hard drive with SecureDoc?  I have been able to
encrypt the Mac side but then I am not able to boot into Windows.  Is
there anyone who could point me in the right direction?

Thank you,
Pebby Garner 

Office of Information Security

The University of Texas at San Antonio

One UTSA Circle 

San Antonio, TX 78249 

Phone: 210-458-7801

email: Pebby.Garner () utsa edu


Current thread: