Innovative Secure Boot System (SBS) with a smartcard.

Size: px
Start display at page:

Download "Innovative Secure Boot System (SBS) with a smartcard."

Transcription

1 Managed Security Services Desktop Security Services Secure Notebook Desktop Security Services. Secure Notebook. Today s business environment demands mobility, and the notebook computer has become an indispensable item for everyone from top executives to sales representatives. Each year notebooks collectively valued at more than a billion euros are stolen worldwide. Notebook users take sensitive information with them for retrieval and updating while traveling. When hardware is stolen, businesses and institutions require the maximum in reliable protection against unauthorized access to their data. What is Secure Notebook and what can it do? Secure Notebook is a secure hard disk encryption solution that uses Secure Boot System (SBS). It provides the perfect power-off protection through innovative security mechanisms that ensure the highest level of security for both the system and the data stored on it, even when the system is powered down. Secure Notebook is especially effective in thwarting attempts to gain access by booting from external media. Hacker tools don t stand a chance. Even installing the hard disk drive in another computer will fail to provide access to the encrypted disk or partition. Your data are secure! Innovative Secure Boot System (SBS) with a smartcard. The Secure Boot System is started during the boot process. Authentication with the smart card begins even before the notebook s operating system (Microsoft Windows) boots. This effectively prevents unauthorized access to data, as a would-be attacker would be unable to access the hard disk data without both possession of the smart card and knowledge of the appropriate PIN. The smart card offers the best protection available to date for such secret elements as keys or passwords. By integrating the authentication process with the Secure Boot System, this solution, unlike others, allows the use of a variety of (PC/SC compatible) smart card readers or smart cards (with a PKCS#11 interface). Data are encrypted using standardized public key methods. Secure Notebook can be integrated seamlessly into public key infrastructures. An integrity checking process provides additional protection against manipulation and offers the highest level of security. Additional functions such as an online and offline PIN reset capability for the smart card are already implemented in the Secure Boot System. Business flexibility

2 Superfast initial encryption and secure algorithms. The very fast initial encryption encodes 20 GB of data in only 45 minutes. The encryption process is completely transparent for the user and causes no noticeable loss in performance. Such widely used encryption algorithms as 256 bit AES or 128-bit DESX provide the highest level of data security. Scalable security and extreme user friendliness. Secure Notebook is a scalable security solution that provides the highest level of security for sensitive business information on notebooks and removable USB media. User authentication settings are flexible, allowing authentication with either a password or the smart card-based Secure Boot System. The option of activating the Secure Boot System at a later time is also available. An installation wizard enables fast and easy installation of Secure Notebook even in large corporate enterprises. Using the integrated script builder, an administrator can perform configuration and software distribution tasks centrally. A company can implement the security policies of its choice company-wide without requiring any action on the part of the end user. Subsequent configuration changes can be implemented quickly and automatically in the same way. the level of data security and help reduce the workload burden on support staff. Benefits: Perfect power-off protection Secure smart card-based authentication according to the possession and knowl - edge principle Standard interfaces for smart cards (PKCS#11) and smart card readers (PC/SC) Simple integration in public key infrastructures (PKI) Use of PKI methods for encryption Multiple user capability with a smart card Data encryption on removable USB media Highly secure algorithms: 256 bit AES, 448 bit Blowfish, 128 bit DESX Cost-reducing and user-friendly help desk function using modern, ISO-compliant challenge/response procedures Login restrictions can also be controlled through challenge/response procedures Highly interoperable with boot managers Integrated installation wizard Supports unattended installation and deinstallation Modern, centrally administrable recovery functions Integrity checks (code hashing) protect the Secure Boot System against manipulation Supports Norton Ghost and other hard disk imaging tools Superfast initial encryption: 120 GB in 4.5 hours Technical characteristics: Operating systems: Windows 2000 Windows XP (NTFS file system) Standards: PKCS#11 PC/SC AES DESX Blowfish Date of publication 10/2006; subject to change without notice; printed on chlorine-free paper, typix A help desk button in the Secure Boot System login dialog provides emergency access to the Secure Notebook challenge/response function. In the event of a faulty smart card or smart card reader, authentication can alternatively take place via the Windows operating system simply by calling a member of the help desk staff. State-of-the-art, centrally administrable recovery functions provide reliable protection against data loss when hard disk errors occur. They also raise Pulished by: Corporate Marketing & Communications Mainzer Landstrasse Frankfurt am Main, Germany Responsible for content: Contact: Phone: +49 (0) Product Marketing Manager: Andreas Brasching

3 Managed Security Services Desktop Security Services Hard drive encryption Desktop Security Services. Hard drive encryption. Confidential data, particularly that on laptops, must be protected. If sensitive data is appropriated by third parties, the result can be major losses. Statistics show that every year, one billion euros worth of notebooks are stolen. And the value of the information stolen far exceeds the value of the hardware. boot protection und encryption of the hard drive with strong algorithms. "Hacker tools" cannot decrypt the protected data. The solution relies on a central management console where the authorized users and machines are managed. Hard-drive encryption offers company-wide protection for sensitive information on notebooks and desktops. Unauthorized access is reliably prevented through pre-boot user authentication, Architecture of the hard drive encryption service with centralized management console. The user is provided with a package that automatically logs in to the management console immediately after installation and registers the PC there. Naturally, installation can also be done through software distribution. Within the framework of flexible security management, encryption can be triggered by the help desk or directly automated following installation. The hard drive is encrypted in a fully transparent manner in the background so that the user can continue to work without a problem, creating significant synergies with respect to the total cost of ownership (TCO). If the laptop is locked or the password is forgotten, a very flexible recovery scenario is possible through the help desk or by means of a Web interface. The user logs in using a password or a highly certified USB security token (based on the "possession and knowledge" principle) on system startup. Without valid system authentication, no access to the hard drive is possible and the data are protected against viewing and theft. Business flexibility

4 The security policy can be configured through the management console and determines how often a user can log on incorrectly or how long he can work with the system without logging on to the server again. scribes rights and configuration and handles software updates using its own system Secure screensaver System requirements: Date of publication 10/2006; subject to change without notice; printed on chlorine-free paper, typix As an option, a secure screen saver can be activated, allowing the user to log in with the token or the hard-drive encryption password. The "Lock when token is withdrawn" option allows the PC to be locked when the smart card or the USB token is removed. Clients: Windows 95, 98 Windows ME Windows NT Windows 2000 Windows XP Service features: Server: Access control through pre-boot with varied USB token support (knowledge and possession) Transparent encryption and decryption for the user Initial encryption occurs during operation, allowing the user to continue working and making for low TCO Efficient central security management and recovery via helpline or using Web interface Single sign on for all Windows platforms and reconciliation with domain password possible User administration possible by accessing Active Directory or another directory service Central management, allowing separate administration of users and machines, pre- Windows 2000 server Windows 2003 server Windows 2000 (optional) Windows XP (optional) offers support and will assist in designing and installing the product as part of its advisory services. Pulished by: Corporate Marketing & Communications Mainzer Landstrasse Frankfurt am Main, Germany Responsible for content: Contact: Phone: +49 (0) Product Marketing Manager: Andreas Brasching

5 Managed Security Services Desktop Security Services Container encryption Desktop Security Services. Container encryption. Container encryption reliably protects sensitive data on notebooks and desktop computers, ensuring transparency for the user regardless of where it is stored (local hard drives, exchangeable media, file servers) and at any time. The result: the user need not have a single concern about the security of his data. It is all done by creating secure virtual drives that represent logical drives within the system and store data in encrypted form in a single, large file (a container). This solution combines extensively user-independent encryption with the simultaneous protection of any files in a secure container. It creates a sort of "electronic safe" that protects confidential data on a computer. All the user needs to do is log into a container to open up the electronic safe, and he can then work with his encrypted data as if it were decrypted. The data is automatically encrypted when it is stored in an open container. Likewise, the data is automatically decrypted when it is opened with a program or by Windows Explorer. The user no longer has to deal with encrypting his data. Key Features: Automatic encryption (high transparency) All contents and additional information, such as directory information, filename, file size and author are encoded When working with encrypted files, the data remains encrypted on the hard drive; the content is available as text in the local memory only Confidential data can be secured without making it necessary to encrypt an entire hard drive or partition Access to smart cards via Microsoft CryptoAPI Containers can be created on any available drive. They can be located on portable media (diskettes, CD-ROMs, DVDs, ZIP drives, USB and Flash memory cards etc.), on local drives and even on network drives. All read and write operations on the virtual drive are encrypted and decrypted. Business flexibility

6 Security is under the protection of the container. Without access rights, users can under certain circumstances delete a container (if access is not prevented) and read the encrypted content, but they are not able to read the files in text. The directory structure, which was defined within the container, also remains hidden from them. The option of using Microsoft CryptoAPI architecture allows corresponding hardware components (e. g. chip cards or USB tokens) of leading thirdparty manufacturers to be used for authenticating users. This means it is possible to use certificates and public key key pairs instead of passwords. Once a certificate is assigned to a container, it can be used for authentication after that. Only the user of the certificate has access to the private key associated with the certificate and can thus use it to log in to the container. As with passwords, certificates can be provided with user or administrator rights. Service features: Fast and transparent encryption through simulation of an additional drive Can be used on hard drives, network drives and portable media (diskettes, CD-ROMs, DVD, ZIP drives, Jaz, MO disks, USB and Flash memory cards, etc.) Seamless integration into Windows Explorer User authentication via password and/or X.509 certificates Support for chip cards and USB tokens (e. g. Aladdin) Central administration of security-relevant settings through group guidelines in ADS Optional deletion of Windows pagefile when computer is shut off Secure crypto-algorithms: AES (Rijndael) 128-bit key length, RSA, PKCS#5, X.509 certificates Date of publication 10/2006; subject to change without notice; printed on chlorine-free paper, typix System requirements: offers support and will assist in designing and installing the product as part of its advisory services. Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows NT Version 4.0 Pulished by: Corporate Marketing & Communications Mainzer Landstrasse Frankfurt am Main, Germany Responsible for content: Contact: Phone: +49 (0) Product Marketing Manager: Andreas Brasching

Do "standard tools" meet your needs when it comes to providing security for mobile PCs and data media?

Do standard tools meet your needs when it comes to providing security for mobile PCs and data media? Product Insight Do "standard tools" meet your needs when it comes to providing security for mobile PCs and data media? Author Version Document Information Utimaco Product Management Device Security 4.30.00

More information

DriveLock and Windows 7

DriveLock and Windows 7 Why alone is not enough CenterTools Software GmbH 2011 Copyright Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise

More information

Firmware security features in HP Compaq business notebooks

Firmware security features in HP Compaq business notebooks HP ProtectTools Firmware security features in HP Compaq business notebooks Embedded security overview... 2 Basics of protection... 2 Protecting against unauthorized access user authentication... 3 Pre-boot

More information

CRYPTAS it-security GmbH

CRYPTAS it-security GmbH Winmagic SecureDoc Enterprise Server 4.3.1 Common functionality CRYPTAS it-security GmbH Modecenterstrasse 22/B2 A-1030 Wien www.cryptas.com Knowlegde Guide Vienna, December 2007 Winmagic SecureDoc Enterprise

More information

DriveLock and Windows 8

DriveLock and Windows 8 Why alone is not enough CenterTools Software GmbH 2013 Copyright Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise

More information

How to Encrypt your Windows 7 SDS Machine with Bitlocker

How to Encrypt your Windows 7 SDS Machine with Bitlocker How to Encrypt your Windows 7 SDS Machine with Bitlocker ************************************ IMPORTANT ******************************************* Before encrypting your SDS Windows 7 Machine it is highly

More information

Using BitLocker As Part Of A Customer Data Protection Program: Part 1

Using BitLocker As Part Of A Customer Data Protection Program: Part 1 Using BitLocker As Part Of A Customer Data Protection Program: Part 1 Tech Tip by Philip Cox Source: searchsecuritychannel.com As an information security consultant, one of my jobs is to help my clients

More information

How Drive Encryption Works

How Drive Encryption Works WHITE PAPER: HOW DRIVE ENCRYPTION WORKS........................................ How Drive Encryption Works Who should read this paper Security and IT administrators Content Introduction to Drive Encryption.........................................................................................

More information

Encrypting with BitLocker for disk volumes under Windows 7

Encrypting with BitLocker for disk volumes under Windows 7 Encrypting with BitLocker for disk volumes under Windows 7 Summary of the contents 1 Introduction 2 Hardware requirements for BitLocker Driver Encryption 3 Encrypting drive 3.1 Operating System Drive 3.1.1

More information

How Endpoint Encryption Works

How Endpoint Encryption Works WHITE PAPER: HOW ENDPOINT ENCRYPTION WORKS........................................ How Endpoint Encryption Works Who should read this paper Security and IT administrators Content Introduction to Endpoint

More information

Whitepaper Enhancing BitLocker Deployment and Management with SimplySecure. Addressing the Concerns of the IT Professional Rob Weber February 2015

Whitepaper Enhancing BitLocker Deployment and Management with SimplySecure. Addressing the Concerns of the IT Professional Rob Weber February 2015 Whitepaper Enhancing BitLocker Deployment and Management with SimplySecure Addressing the Concerns of the IT Professional Rob Weber February 2015 Page 2 Table of Contents What is BitLocker?... 3 What is

More information

www.rohos.com Two-factor authentication Free portable encryption for USB drive Hardware disk encryption Face recognition logon

www.rohos.com Two-factor authentication Free portable encryption for USB drive Hardware disk encryption Face recognition logon Two-factor authentication Free portable encryption for USB drive Hardware disk encryption Face recognition logon Secure Windows and Mac login by USB key www.rohos.com Rohos Logon Key Secure two-factor

More information

GoldKey Product Info. Do not leave your Information Assets at risk Read On... Detailed Product Catalogue for GoldKey

GoldKey Product Info. Do not leave your Information Assets at risk Read On... Detailed Product Catalogue for GoldKey GoldKey Product Info Detailed Product Catalogue for GoldKey Do not leave your Information Assets at risk Read On... GoldKey: Reinventing the Security Strategy The Changing Landscape of Data Security With

More information

WinMagic Data Security Enterprise Full Disk Encryption Solutions

WinMagic Data Security Enterprise Full Disk Encryption Solutions WinMagic Data Security Enterprise Full Disk Encryption Solutions 23 Differentiating Features January 2007 200 Matheson Blvd. West, Suite 201 Mississauga, ON, Canada L5R 3L7 Tel: (905) 502-7000 Fax: (905)

More information

SafeGuard Private Disk 2.50 help

SafeGuard Private Disk 2.50 help SafeGuard Private Disk 2.50 help Document date: March 2011 Contents 1 Overview... 2 2 Getting started... 6 3 SafeGuard PrivateDisk main application... 14 4 SafeGuard PrivateDisk Portable... 31 5 Use cases

More information

Enhancing Organizational Security Through the Use of Virtual Smart Cards

Enhancing Organizational Security Through the Use of Virtual Smart Cards Enhancing Organizational Security Through the Use of Virtual Smart Cards Today s organizations, both large and small, are faced with the challenging task of securing a seemingly borderless domain of company

More information

White Paper: Whole Disk Encryption

White Paper: Whole Disk Encryption How Whole Disk Encryption Works White Paper: Whole Disk Encryption How Whole Disk Encryption Works Contents Introduction to Whole Disk Encryption.....................................................................

More information

Introduction to BitLocker FVE

Introduction to BitLocker FVE Introduction to BitLocker FVE (Understanding the Steps Required to enable BitLocker) Exploration of Windows 7 Advanced Forensic Topics Day 3 What is BitLocker? BitLocker Drive Encryption is a full disk

More information

Introducing etoken. What is etoken?

Introducing etoken. What is etoken? Introducing etoken Nirit Bear September 2002 What is etoken? Small & portable reader-less Smartcard Standard USB connectivity Logical and physical protection Tamper evident (vs. tamper proof) Water resistant

More information

TrustKey Tool User Manual

TrustKey Tool User Manual TrustKey Tool User Manual 1 Table of Contents 1 Introduction... 5 2 TrustKey Product...6 2.1 TrustKey Tool... 6 2.2 TrustKey function modules...7 2.3 TrustKey using environment...7 3 TrustKey Tool Installation...

More information

CHOOSING THE RIGHT PORTABLE SECURITY DEVICE. A guideline to help your organization chose the Best Secure USB device

CHOOSING THE RIGHT PORTABLE SECURITY DEVICE. A guideline to help your organization chose the Best Secure USB device CHOOSING THE RIGHT PORTABLE SECURITY DEVICE A guideline to help your organization chose the Best Secure USB device Introduction USB devices are widely used and convenient because of their small size, huge

More information

Convenience and security

Convenience and security Convenience and security ControlSphere is a computer security and automation solution designed to protect user data and automate most of authentication tasks for the user at work and home environments.

More information

Windows BitLocker Drive Encryption Step-by-Step Guide

Windows BitLocker Drive Encryption Step-by-Step Guide Windows BitLocker Drive Encryption Step-by-Step Guide Microsoft Corporation Published: September 2006 Abstract Microsoft Windows BitLocker Drive Encryption is a new hardware-enhanced feature in the Microsoft

More information

PROXKey Tool User Manual

PROXKey Tool User Manual PROXKey Tool User Manual 1 Table of Contents 1 Introduction...4 2 PROXKey Product... 5 2.1 PROXKey Tool... 5 2.2 PROXKey function modules...6 2.3 PROXKey using environment...6 3 PROXKey Tool Installation...7

More information

Security Considerations for DirectAccess Deployments. Whitepaper

Security Considerations for DirectAccess Deployments. Whitepaper Security Considerations for DirectAccess Deployments Whitepaper February 2015 This white paper discusses security planning for DirectAccess deployment. Introduction DirectAccess represents a paradigm shift

More information

Securing Corporate Data and Making Life Easier for the IT Admin Benefits of Pre Boot Network Authentication Technology

Securing Corporate Data and Making Life Easier for the IT Admin Benefits of Pre Boot Network Authentication Technology 20140115 Securing Corporate Data and Making Life Easier for the IT Admin Benefits of Pre Boot Network Authentication Technology TABLE OF CONTENTS What s at risk for your organization? 2 Is your business

More information

A+ Guide to Software: Managing, Maintaining, and Troubleshooting, 5e. Chapter 3 Installing Windows

A+ Guide to Software: Managing, Maintaining, and Troubleshooting, 5e. Chapter 3 Installing Windows : Managing, Maintaining, and Troubleshooting, 5e Chapter 3 Installing Windows Objectives How to plan a Windows installation How to install Windows Vista How to install Windows XP How to install Windows

More information

GoldKey Software. User s Manual. Revision 7.12. WideBand Corporation www.goldkey.com. Copyright 2007-2014 WideBand Corporation. All Rights Reserved.

GoldKey Software. User s Manual. Revision 7.12. WideBand Corporation www.goldkey.com. Copyright 2007-2014 WideBand Corporation. All Rights Reserved. GoldKey Software User s Manual Revision 7.12 WideBand Corporation www.goldkey.com 1 Table of Contents GoldKey Installation and Quick Start... 5 Initial Personalization... 5 Creating a Primary Secure Drive...

More information

SecureAge SecureDs Data Breach Prevention Solution

SecureAge SecureDs Data Breach Prevention Solution SecureAge SecureDs Data Breach Prevention Solution In recent years, major cases of data loss and data leaks are reported almost every week. These include high profile cases like US government losing personal

More information

Oracle Enterprise Single Sign-on Technical Guide An Oracle White Paper June 2009

Oracle Enterprise Single Sign-on Technical Guide An Oracle White Paper June 2009 Oracle Enterprise Single Sign-on Technical Guide An Oracle White Paper June 2009 EXECUTIVE OVERVIEW Enterprises these days generally have Microsoft Windows desktop users accessing diverse enterprise applications

More information

Disk Encryption. Aaron Howard IT Security Office

Disk Encryption. Aaron Howard IT Security Office Disk Encryption Aaron Howard IT Security Office Types of Disk Encryption? Folder Encryption Volume or Full Disk Encryption OS / Boot Volume Data Volume Managed or Unmanaged Key Backup and Data Assurance

More information

Pointsec Enterprise Encryption and Access Control for Laptops and Workstations

Pointsec Enterprise Encryption and Access Control for Laptops and Workstations Pointsec Enterprise Encryption and Access Control for Laptops and Workstations Overview of PC Security Since computer security has become increasingly important, almost all of the focus has been on securing

More information

Release Notes. NCP Secure Client Juniper Edition. 1. New Features and Enhancements. 2. Problems Resolved

Release Notes. NCP Secure Client Juniper Edition. 1. New Features and Enhancements. 2. Problems Resolved NCP Secure Client Juniper Edition Service Release: 9.30 Build 102 Date: February 2012 1. New Features and Enhancements The following describe the new features introduced in this release: Visual Feedback

More information

Service "NCPCLCFG" is not running In this case, increase the WaitForConfigService setting until the problem is circumvented

Service NCPCLCFG is not running In this case, increase the WaitForConfigService setting until the problem is circumvented NCP Secure Client Juniper Edition Service Release: 9.30 Build 186 Date: July 2012 1. New Features and Enhancements The following describes the new feature introduced in this release: Configurable Service

More information

Token User Guide. Version 1.0/ July 2013

Token User Guide. Version 1.0/ July 2013 Token User Guide Version 1.0/ July 2013 Index Overview... 3 Usage requirements... 4 KIT contents... 5 Smart Card installation... 6 Reader driver installation... 7 In the case of Windows XP... 7 In the

More information

For Managing Central Deployment, Policy Management, Hot Revocation, Audit Facilities, and Safe Central Recovery.

For Managing Central Deployment, Policy Management, Hot Revocation, Audit Facilities, and Safe Central Recovery. Investment and Governance Division 614.995.9928 tel Ted Strickland, Governor 30 East Broad Street, 39 th Floor 614.644.9152 fax R. Steve Edmonson, Director / State Chief Information Officer Columbus, Ohio

More information

Enterprise Security Management CheckPoint SecuRemote VPN v4.0 for pcanywhere

Enterprise Security Management CheckPoint SecuRemote VPN v4.0 for pcanywhere Enterprise Security Management CheckPoint SecuRemote VPN v4.0 for pcanywhere White Paper 7KH#&KDOOHQJH Virtual Private Networks (VPNs) provides a powerful means of protecting the privacy and integrity

More information

HP ProtectTools Embedded Security Guide

HP ProtectTools Embedded Security Guide HP ProtectTools Embedded Security Guide Document Part Number: 364876-001 May 2004 This guide provides instructions for using the software that allows you to configure settings for the HP ProtectTools Embedded

More information

SafeGuard Easy Administrator help. Product version: 6 Document date: February 2012

SafeGuard Easy Administrator help. Product version: 6 Document date: February 2012 SafeGuard Easy Administrator help Product version: 6 Document date: February 2012 Contents 1 About Sophos SafeGuard (SafeGuard Easy)...4 2 Getting started...9 3 Installation...16 4 Log on to SafeGuard

More information

MCTS Guide to Microsoft Windows 7. Chapter 7 Windows 7 Security Features

MCTS Guide to Microsoft Windows 7. Chapter 7 Windows 7 Security Features MCTS Guide to Microsoft Windows 7 Chapter 7 Windows 7 Security Features Objectives Describe Windows 7 Security Improvements Use the local security policy to secure Windows 7 Enable auditing to record security

More information

EMBASSY Remote Administration Server (ERAS) BitLocker Deployment Guide

EMBASSY Remote Administration Server (ERAS) BitLocker Deployment Guide EMBASSY Remote Administration Server (ERAS) BitLocker Deployment Guide BitLocker Deployment Guide Document Version 0.0.0.5 http://www.wave.com ERAS v 2.8 Wave Systems Corp. 2010 Contents Contents... 2

More information

etoken PKI Client (Windows) User s Guide Version 5.1 Revision B

etoken PKI Client (Windows) User s Guide Version 5.1 Revision B etoken PKI Client (Windows) User s Guide Version 5.1 Revision B All attempts have been made to make the information in this document complete and accurate. Aladdin is not responsible for any direct or

More information

Kaspersky Lab s Full Disk Encryption Technology

Kaspersky Lab s Full Disk Encryption Technology Kaspersky Lab s Full Disk Encryption Technology In the US alone, an estimated 12,000 laptops are lost or stolen each week. According to the Ponemon Institute, a laptop is stolen every 53 seconds; more

More information

Installing and Upgrading to Windows 7

Installing and Upgrading to Windows 7 Installing and Upgrading to Windows 7 Before you can install Windows 7 or upgrade to it, you first need to decide which version of 7 you will use. Then, you should check the computer s hardware to make

More information

PGP Whole Disk Encryption Training

PGP Whole Disk Encryption Training PGP Whole Disk Encryption Training Agenda WDE Overview Licensing Universal Server & Client Basics Installation Password Recovery OS Maintenance Support Questions 2 Whole Disk Encryption Protects against:

More information

YOUR DATA UNDER SIEGE. DEFEND IT WITH ENCRYPTION.

YOUR DATA UNDER SIEGE. DEFEND IT WITH ENCRYPTION. YOUR DATA UNDER SIEGE. DEFEND IT WITH ENCRYPTION. With Kaspersky, now you can. kaspersky.com/business Be Ready for What s Next Your Data Under Siege. Defend it with Encryption. 1.0 Keeping up with the

More information

Verbatim Secure Data USB Drive. User Guide. User Guide Version 2.0 All rights reserved

Verbatim Secure Data USB Drive. User Guide. User Guide Version 2.0 All rights reserved Verbatim Secure Data USB Drive User Guide User Guide Version 2.0 All rights reserved Table of Contents Table of Contents... 2 1. Introduction to Verbatim Secure Data USB Drive... 3 2. System Requirements...

More information

Comodo Disk Encryption

Comodo Disk Encryption Comodo Disk Encryption Version 2.0 User Guide Version 2.0.122010 Versi Comodo Security Solutions 525 Washington Blvd. Jersey City, NJ 07310 Table of Contents 1.Comodo Disk Encryption Introduction... 3

More information

Safer. Simpler. Easier.

Safer. Simpler. Easier. Safer. Simpler. Easier. My technology ROI just got a boost. Software Assurance Benefit Windows Vista Enterprise an > New Version Rights > Spread Payments > Deploy > Desktop Deployment Planning Services

More information

Guidelines on use of encryption to protect person identifiable and sensitive information

Guidelines on use of encryption to protect person identifiable and sensitive information Guidelines on use of encryption to protect person identifiable and sensitive information 1. Introduction David Nicholson, NHS Chief Executive, has directed that there should be no transfers of unencrypted

More information

Yale Software Library

Yale Software Library e/ Yale Software Library http://www.yale.edu/its/software/ For assistance contact the ITS Help Desk 432-9000 or helpdesk@yale.edu Installation PGP Desktop for Windows Operating Systems Preparing your computer:

More information

Smartcard Logon Overview

Smartcard Logon Overview etoken for Windows Smartcard Logon Lesson 9 April 2004 etoken Certification Course Smartcard Logon Overview Windows 2000/2003 Enterprise Server built-in feature Smartcard logon requires issuing a personal

More information

HP ProtectTools Security Manager - v2.0

HP ProtectTools Security Manager - v2.0 HP ProtectTools Security Manager - v2.0 Introduction...2 The security dilemma...2 HP ProtectTools Security Manager...3 Security Software Modules for HP ProtectTools...4 Embedded Security for HP ProtectTools...5

More information

Encrypting the Private Files on Your Computer Presentation by Eric Moore, CUGG June 12, 2010

Encrypting the Private Files on Your Computer Presentation by Eric Moore, CUGG June 12, 2010 Encrypting the Private Files on Your Computer Presentation by Eric Moore, CUGG June 12, 2010 I. File Encryption Basics A. Encryption replaces data within a file with ciphertext which resembles random data

More information

Chapter 12 - Installing Windows Objectives How to plan a Windows installation How to install Windows Vista How to install Windows XP How to install

Chapter 12 - Installing Windows Objectives How to plan a Windows installation How to install Windows Vista How to install Windows XP How to install Chapter 12 - Installing Windows Objectives How to plan a Windows installation How to install Windows Vista How to install Windows XP How to install Windows 2000 How to Plan a Windows Installation Situations

More information

ZENworks 11 Support Pack 4 Full Disk Encryption Agent Reference. May 2016

ZENworks 11 Support Pack 4 Full Disk Encryption Agent Reference. May 2016 ZENworks 11 Support Pack 4 Full Disk Encryption Agent Reference May 2016 Legal Notice For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government

More information

Sophos Disk Encryption License migration guide. Product version: 5.61 Document date: June 2012

Sophos Disk Encryption License migration guide. Product version: 5.61 Document date: June 2012 Sophos Disk Encryption License migration guide Product version: 5.61 Document date: June 2012 Contents 1 About this guide...3 2 Add encryption to an existing Sophos security solution...5 3 SDE/SGE 4.x

More information

Copyright Giritech A/S. Secure Mobile Access

Copyright Giritech A/S. Secure Mobile Access Secure Mobile Access From everywhere... From any device... From user......to applications Page 3...without compromising on security and usability... and to my PC in the office: Secure Virtual Access Contrary

More information

Encryption Process and Procedures Table of Contents

Encryption Process and Procedures Table of Contents Encryption Process and Procedures Table of Contents Introduction Why do we need software encryption? Online Resources Pre Encryption Activities Process Flow Backing up your computer Run Chkdsk and Defrag

More information

Deploying EFS: Part 1

Deploying EFS: Part 1 Security Watch Deploying EFS: Part 1 John Morello By now, everyone has heard reports about personal or sensitive data being lost because of laptop theft or misplacement. Laptops go missing on a regular

More information

Smart Card- An Alternative to Password Authentication By Ahmad Ismadi Yazid B. Sukaimi

Smart Card- An Alternative to Password Authentication By Ahmad Ismadi Yazid B. Sukaimi Smart Card- An Alternative to Password Authentication By Ahmad Ismadi Yazid B. Sukaimi Purpose This paper is intended to describe the benefits of smart card implementation and it combination with Public

More information

etoken Single Sign-On 3.0

etoken Single Sign-On 3.0 etoken Single Sign-On 3.0 Frequently Asked Questions Table of Contents 1. Why aren t passwords good enough?...2 2. What are the benefits of single sign-on (SSO) solutions?...2 3. Why is it important to

More information

In order to enable BitLocker, your hard drive must be partitioned in a particular manner.

In order to enable BitLocker, your hard drive must be partitioned in a particular manner. ENABLE BITLOCKER ON WINDOWS VISTA - WITHOUT A TPM Requirements: You must be running Vista Enterprise or Vista Ultimate to enable BitLocker. Any other version of Vista is not compatible. It is recommended

More information

Virtual Machine Encryption Basics

Virtual Machine Encryption Basics VMWARE TECHNICAL NOTE VMware ACE Virtual Machine Encryption Basics VMware ACE gives administrators the option of enhancing the security of virtual machines they distribute to end users by encrypting key

More information

Management of Hardware Passwords in Think PCs.

Management of Hardware Passwords in Think PCs. Lenovo Corporation March 2009 security white paper Management of Hardware Passwords in Think PCs. Ideas from Lenovo Notebooks and Desktops Workstations and Servers Service and Support Accessories Introduction

More information

Aegis Padlock for business

Aegis Padlock for business Aegis Padlock for business Problem: Securing private information is critical for individuals and mandatory for business. Mobile users need to protect their personal information from identity theft. Businesses

More information

Digital Signatures on iqmis User Access Request Form

Digital Signatures on iqmis User Access Request Form Digital Signatures on iqmis User Access Request Form When a user clicks in the User Signature block on the iqmis Access Form, the following window appears: Click Save a Copy and rename it with your name,

More information

ACER ProShield. Table of Contents

ACER ProShield. Table of Contents ACER ProShield Table of Contents Revision History... 3 Legal Notices... 4 Executive Summary... 5 Introduction... 5 Protection against unauthorized access... 6 Why ACER ProShield... 7 ACER ProShield...

More information

BitLocker Encryption for non-tpm laptops

BitLocker Encryption for non-tpm laptops BitLocker Encryption for non-tpm laptops Contents 1.0 Introduction... 2 2.0 What is a TPM?... 2 3.0 Users of non-tpm University laptops... 2 3.1 Existing Windows 7 laptop users... 2 3.2 Existing Windows

More information

Managing and Supporting Windows XP Chapter #16

Managing and Supporting Windows XP Chapter #16 Managing and Supporting Windows XP Chapter #16 Amy Hissom Key Terms Backup Operator A Windows 2000/XP user account that can back up and restore any files on the system regardless of its having access to

More information

Check Point FDE integration with Digipass Key devices

Check Point FDE integration with Digipass Key devices INTEGRATION GUIDE Check Point FDE integration with Digipass Key devices 1 VASCO Data Security Disclaimer Disclaimer of Warranties and Limitation of Liabilities All information contained in this document

More information

epass2003 User Guide V1.0 Feitian Technologies Co., Ltd. Website: www.ftsafe.com

epass2003 User Guide V1.0 Feitian Technologies Co., Ltd. Website: www.ftsafe.com epass2003 User Guide V1.0 Feitian Technologies Co., Ltd. Revision History: Date Revision Description June 2013 V1.0 Release of the first version i Software Developer s Agreement All Products of Feitian

More information

BitLocker Drive Encryption Hardware Enhanced Data Protection. Shon Eizenhoefer, Program Manager Microsoft Corporation

BitLocker Drive Encryption Hardware Enhanced Data Protection. Shon Eizenhoefer, Program Manager Microsoft Corporation BitLocker Drive Encryption Hardware Enhanced Data Protection Shon Eizenhoefer, Program Manager Microsoft Corporation Agenda Security Background BitLocker Drive Encryption TPM Overview Building a BitLocker

More information

IBM Client Security Solutions. Client Security User's Guide

IBM Client Security Solutions. Client Security User's Guide IBM Client Security Solutions Client Security User's Guide December 1999 1 Before using this information and the product it supports, be sure to read Appendix B - Notices and Trademarks, on page 22. First

More information

SafeGuard Easy startup guide. Product version: 7

SafeGuard Easy startup guide. Product version: 7 SafeGuard Easy startup guide Product version: 7 Document date: December 2014 Contents 1 About this guide...3 2 About Sophos SafeGuard (SafeGuard Easy)...4 2.1 About Sophos SafeGuard (SafeGuard Easy) 7.0...6

More information

Client side. DESlock + Data Encryption

Client side. DESlock + Data Encryption Data Encryption DESlock + is a simple-to-use encryption application for companies large and small. Take advantage of the optimized setup that speeds up the time to adoption for admins. The client side

More information

In order for BitLocker to be used with a TPM chip, you may need to activate this in BIOS of the laptop.

In order for BitLocker to be used with a TPM chip, you may need to activate this in BIOS of the laptop. ENABLE BITLOCKER ON WINDOWS VISTA USING TPM Requirements: You must be running Vista Enterprise or Vista Ultimate to enable BitLocker. Any other version of Vista is not compatible. A laptop with an enabled/activated

More information

TPM. (Trusted Platform Module) Installation Guide V3.3.0. for Windows Vista

TPM. (Trusted Platform Module) Installation Guide V3.3.0. for Windows Vista TPM (Trusted Platform Module) Installation Guide V3.3.0 for Windows Vista Table of contents 1 Introduction 1.1 Convention... 4 1.2 TPM - An Overview... 5 2 Using TPM for the first time 2.1 Enabling TPM...

More information

Full Disk Encryption Agent Reference

Full Disk Encryption Agent Reference www.novell.com/documentation Full Disk Encryption Agent Reference ZENworks 11 Support Pack 3 May 2014 Legal Notices Novell, Inc., makes no representations or warranties with respect to the contents or

More information

Factory-Installed, Standards-Based Hardware Security. Steven K. Sprague President & CEO, Wave Systems Corp.

Factory-Installed, Standards-Based Hardware Security. Steven K. Sprague President & CEO, Wave Systems Corp. Factory-Installed, Standards-Based Hardware Security Steven K. Sprague President & CEO, Wave Systems Corp. The challenge We are having a little problem with identity and data theft. It is time to reduce

More information

YubiKey Integration for Full Disk Encryption

YubiKey Integration for Full Disk Encryption YubiKey Integration for Full Disk Encryption Pre-Boot Authentication Version 1.2 May 7, 2012 Introduction Disclaimer yubico Yubico is the leading provider of simple, open online identity protection. The

More information

A Guide to Managing Microsoft BitLocker in the Enterprise

A Guide to Managing Microsoft BitLocker in the Enterprise 20140410 A Guide to Managing Microsoft BitLocker in the Enterprise TABLE OF CONTENTS Introduction 2 Why You Can t Ignore Effective FDE 3 BitLocker by Default 4 BitLocker s Total Cost of Ownership 5 SecureDoc

More information

SecureDoc for Mac v6.1. User Manual

SecureDoc for Mac v6.1. User Manual SecureDoc for Mac v6.1 User Manual Copyright 1997-2012 by WinMagic Inc. All rights reserved. Printed in Canada Many products, software and technologies are subject to export control for both Canada and

More information

Symantec Endpoint Encryption Full Disk

Symantec Endpoint Encryption Full Disk Symantec Endpoint Encryption Full Disk User Guide Version 6.0 Information in this document is subject to change without notice. No part of this document may be reproduced or transmitted in any form or

More information

SafeGuard Enterprise User help. Product version: 7

SafeGuard Enterprise User help. Product version: 7 SafeGuard Enterprise User help Product version: 7 Document date: December 2014 Contents 1 About SafeGuard Enterprise 7.0...5 2 SafeGuard Enterprise on Windows endpoints...7 3 Security best practices...9

More information

Using Microsoft Windows Encrypted File System (EFS)

Using Microsoft Windows Encrypted File System (EFS) Using Microsoft Windows Encrypted File System (EFS) Agenda Protecting our Data Types of Data What is EFS How to use EFS Best Practices Protecting our Data Two types of disk encryption: Full Disk Encryption

More information

The Encryption Anywhere Data Protection Platform

The Encryption Anywhere Data Protection Platform The Encryption Anywhere Data Protection Platform A Technical White Paper 5 December 2005 475 Brannan Street, Suite 400, San Francisco CA 94107-5421 800-440-0419 415-683-2200 Fax 415-683-2349 For more information,

More information

Unicenter Desktop DNA r11

Unicenter Desktop DNA r11 Data Sheet Unicenter Desktop DNA r11 Unicenter Desktop DNA is a scalable migration solution for the management, movement and maintenance of a PC s DNA (including user settings, preferences and data.) A

More information

HP ProtectTools User Guide

HP ProtectTools User Guide HP ProtectTools User Guide Copyright 2007 Hewlett-Packard Development Company, L.P. Microsoft and Windows are U.S. registered trademarks of Microsoft Corporation. Intel is a trademark or registered trademark

More information

The Ultimate Authentication Technology

The Ultimate Authentication Technology "USB tokens will be widely adopted into the market because of their low price and greater convenience." IDC, 2003 The Ultimate Authentication Technology The Digital Identity Paradigm Network security and

More information

Managing BitLocker Encryption

Managing BitLocker Encryption Managing BitLocker Encryption WWW.CREDANT.COM Introduction Organizations are facing a data security crisis. Despite decades of investment in security, breaches of sensitive information continue to dominate

More information

Understanding Northwestern University s contract with Symantec. Symantec Solutions for Cost Reduction & Optimization

Understanding Northwestern University s contract with Symantec. Symantec Solutions for Cost Reduction & Optimization Understanding Northwestern University s contract with Symantec Symantec Solutions for Cost Reduction & Optimization Chris Hagelin and Shane Scholes Symantec Account Manager and Symantec Sales Engineer

More information

Table of Contents. TPM Configuration Procedure... 2. 1. Configuring the System BIOS... 2

Table of Contents. TPM Configuration Procedure... 2. 1. Configuring the System BIOS... 2 Table of Contents TPM Configuration Procedure... 2 1. Configuring the System BIOS... 2 2. Installing the Infineon TPM Driver and the GIGABYTE Ultra TPM Utility... 3 3. Initializing the TPM Chip... 4 3.1.

More information

Service Overview. Business Cloud Backup. Introduction

Service Overview. Business Cloud Backup. Introduction Service Overview Business Cloud Backup Techgate s Business Cloud Backup service is a secure, fully automated set and forget solution, powered by Attix5, and is ideal for organisations with limited in-house

More information

The Benefits of an Industry Standard Platform for Enterprise Sign-On

The Benefits of an Industry Standard Platform for Enterprise Sign-On white paper The Benefits of an Industry Standard Platform for Enterprise Sign-On The need for scalable solutions to the growing concerns about enterprise security and regulatory compliance can be addressed

More information

CribMaster Database and Client Requirements

CribMaster Database and Client Requirements FREQUENTLY ASKED QUESTIONS CribMaster Database and Client Requirements GENERAL 1. WHAT TYPE OF APPLICATION IS CRIBMASTER? ARE THERE ANY SPECIAL APPLICATION SERVER OR USER INTERFACE REQUIREMENTS? CribMaster

More information

SecureVault Online Backup Service FAQ

SecureVault Online Backup Service FAQ SecureVault Online Backup Service FAQ C0110 SecureVault FAQ (EN) - 1 - Rev. 19-Nov-2007 Table of Contents 1. General 4 Q1. Can I exchange the client type between SecureVault PC Backup Manager and SecureVault

More information

RSA Authentication Manager 7.1 Basic Exercises

RSA Authentication Manager 7.1 Basic Exercises RSA Authentication Manager 7.1 Basic Exercises Contact Information Go to the RSA corporate web site for regional Customer Support telephone and fax numbers: www.rsa.com Trademarks RSA and the RSA logo

More information

Symantec PGP Whole Disk Encryption Hands-On Lab V 3.7

Symantec PGP Whole Disk Encryption Hands-On Lab V 3.7 Symantec PGP Whole Disk Encryption Hands-On Lab V 3.7 Description This hands-on lab session covers the hard drive encryption technologies from PGP. Students will administer a typical Whole Disk Encryption

More information

Full Disk Encryption Policy Reference

Full Disk Encryption Policy Reference www.novell.com/documentation Full Disk Encryption Policy Reference ZENworks 11 Support Pack 2 October 2013 Legal Notices Novell, Inc., makes no representations or warranties with respect to the contents

More information