Re: Laptop whole disk encryption

[Louis APONTE <LouisAponte () WEBER EDU>]

I can also say that our deployment has not gone smoothly.
We too have a large diversity of systems to contend with, as well as an
inherent distrust by the majority of our users for software that can
possibly lock them out of their own systems. 
The McAfee process has required us to preform pre-install review of BIO
settings (Dell default raid set to on, and hard drive
incompatibilities); as well as preforming a hard drive sector scan
(recommended) on older systems. All this before any software is
installed and encryption started.
If you add some McAfee hating and fears that more not less data will be
in motion, should users really feel "secured"? I would say we are in the
same boat as Simpson College. We are looking at all comers as well as
Bitlocker, File Vault and FDE ready Hrd Drv's as possible solutions.

 
 
Louis Aponte

Weber State University

 
> > > On 3/19/2012 at 1:18 PM, in message
<53C73473-D326-4DB8-9494-387DB4BDD010 () vassar edu>, Bret Ingerman
<ingerman () VASSAR EDU> wrote:

We used to use PGP for our laptop encryption (and some desktops). We
originally chose it due to it being cross-platform and due to it having
an enterprise console that we could use to show when a laptop was last
encrypted.  The PGP folks were great to work with and offered quick
updates.  Well, PGP was bought by Symantec and things went downhill for
us.  Symantec was not as quick with updates which caused problems for
both PC and Mac laptops when OS updates caused encrypted machines to not
boot (PGP is a pre-boot solution).  There were also a lot of support
issues as those bricked machines needed to have a technician come and
install the necessary patches (which were not end-user friendly).  So we
started to look and came across Credant, which we have purchased from
Dell (which Dell calls "Dell Data Protection").  The solution woks
either pre- or post-boot (we have chosen the latter) and the company
offers excellent technical support.

  --Bret 





From:        Paul Crittenden <paul.crittenden () SIMPSON EDU> 
To:        SECURITY () LISTSERV EDUCAUSE EDU 
Date:        03/19/2012 01:34 PM 
Subject:        [SECURITY] Laptop whole disk encryption 
Sent by:        The EDUCAUSE Security Constituent Group Listserv
<SECURITY () LISTSERV EDUCAUSE EDU> 



We currently use McAfee’s Safeboot/Endpoint Encryption software to
encrypt our users laptops. Our PC Hardware folks do not like McAfee, we
did when it was not owned by McAfee but you know how that goes. 
  
Anyway, I have been tasked when helping to find a possible replacement.
What software package are you using to encrypt your users laptops. Or
for that matter, if you are not, what is your rational. 
  
Thanks, 



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Bret Ingerman
Vice President for Computing and Information Services
Vassar College
124 Raymond Avenue
Poughkeepsie, NY  12604

               ingerman () vassar edu
(845) 437-7605  - phone            (845) 437-7050  - fax
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~