Re: Laptop Encryption

["Warner, David F" <DWarner () COMMNET EDU>]

We have started the process of implementing Device Encryption from
McAfee.  This was the Safeboot product before being purchased by McAfee.
It does seem very robust with enterprise level key management with
options for content encryption and USB device controls.


David Warner
Senior Security Specialist
CT Community Colleges


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Timothy Payne
Sent: Tuesday, February 17, 2009 8:06 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Laptop Encryption

Good Evening...

We are starting to investigate enterprise encryption on College
laptops, and eventually removeable drives.

Can anyone share with the list their experiences with enterprise level
encryption products?  I'm most interested in products that use some
sort of 2-factor authentication...ie, a USB key required to boot and a
password, or password/checksum combo.

How do you deal with the inevitable user who loses their token or
forgets their password?

I've looked at Tru-Crypt and it does a really good job for me, but I
don't think it will scale well to more than a handful of users.

Thanks!



Tim Payne, CISSP, CCNA
Network Administrator
Macalester College