Bitlocker alternatives for whole drive encryption.

[Kdes]

Hi All

Been looking for an alternative for whole drive encryption to bitlocker. Google searches keep bringing up ascrypt and truecrypt.

But need something that is much more straight forward to use like bitlocker that can encrypt the whole drive. But at the same time that will prompt the user to enter a pass key on boot. So that we can use the same pass key on all laptops in the office.

Thanks

 

[PaCiFieR]

Have you considered Safeguard Easy perhaps.

 

[infscrtyrisk]

So that we can use the same pass key on all laptops in the office.

Thanks

I gather that you've got your trust model sorted.

 

[TedLasso]

And why not just use bitlocker??

 

[infscrtyrisk]

And why not just use bitlocker??

Great question, considering the trust model.

 

[TedLasso]

I personally think it's rather pointless to encrypt all drives on lots of devices with the same password and then to force people to use it to unlock it. It's defeats the purpose as you've comprised every device intentionally by taking a shortcut.

Regardless of what tool you use, each PC must be different. If these PCs are windows devices and part of a domain, the bitlocker keys can be stored in the computer account object in AD for easy recovery should password be forgotten - and thats the most important bit with users. Nothing prevents them from changing the password to something unique and then they forget it or refuse to divulge it when there is a disciplinary or they leaving...

If the laptops have TPM chips, then encryption keys are stored there and drives are automatically unlocked when PC is booted up. Another layer to add could be bios password if you insist on them putting a password to boot up.

Anyway, just waffling here. Need more info

 

[infscrtyrisk]

Or just spray some of this: http://www.justskincarecosmetics.com/products/4440.html