Looking for a good full encryption software for company

TechnicalJay

Hello,

At the company we have about 100 laptops that we are looking to put full encryption on. Does anyone know some of the top encryption software companies out there?

Maybe a free one and another one with a pre-boot authentication.

Thank you.

scaredoftests

openssl for win64.

beads

Full Disk Encryption or FDE?
https://technet.microsoft.com/en-us/library/cc732774(v=ws.11).aspx

Built in to the Operating System and its Microsoft so its easier to manage.

Outside of that your looking at PGP or Self Encrypted Drives (SED). Both significantly slow the boot process down but have their advantages and disadvantages. Any of these should provide more than adequate protection.

- b/eads

Phalanx

Bitlocker?

cyberguypr

OP, would you care to provide more details on your requirements? Do you need centralized management? If the 100 machines don't have the proper Windows version with Bitlocker and the right TPM, then we are talking about a bigger project and other options may be a better choice.

TechnicalJay

Thanks for the reply guys,

BitLocker is not an option as we are still running Win 7 Professional. Centralized management isn't an option either as we are a NFP organization using the governments network and are leasing server space through them. The government was using Symantec but recently switched over to Bitlocker as they have Win 7 EE.

Phalanx

https://technet.microsoft.com/en-us/library/dd835565(v=ws.10).aspx

TechGromit

TechnicalJay wrote: »

At the company we have about 100 laptops that we are looking to put full encryption on. Does anyone know some of the top encryption software companies out there?

Maybe a free one and another one with a pre-boot authentication.

There a couple Russian outfits that can help you with that, full disk encryption, and free to boot.... until you want to access you data, than they want bitcoins.


On a serous side note, I'm thinking someone could modify some ransomware to be a marketable business encryption software, just make it configurable so the C2 is a server you control and of course you get to set the encryption key.

cyberguypr

I love the "BitLocker is not an option" comment immediately followed by a link to a BitLocker article. priceless.

OP, you may want to look at SecureDoc.

stryder144

Bitlocker is great, but since you are running Windows 7 Pro and it is only supported on EE and Ultimate versions, that leaves that one out of the question. Are you planning on moving to Windows 10 Pro or above? If so, it has Bitlocker. If not, have you looked into VeraCrypt? It is one of the successors to TrueCrypt. Might be worth a look.

Phalanx

You could try one of these also: https://www.comparitech.com/blog/information-security/truecrypt-is-discoutinued-try-these-free-alternatives/

TechnicalJay

Thanks guys I'll check the ones out that are posted. We'll be sticking with Win 7 Pro for a little while as Win 10 isn't supported yet for some of the medical software we use.

TechnicalJay

Another question if anyone knows. Does any of the encryption software listed have a login screen before logging into windows? Or is this an option with centralized managed encryption only?

cyberguypr

If you do FDE many products will do pre-boot authentication. Will that suffice?

TechnicalJay

Absolutely, I just checked out VeraCrypt which looks pretty good and has what I'm looking for.

Thanks guys

Svoboda

We're using Trend's Data/Mobile Armor in our organization. It was shaky when they first rolled it out but it's been pretty solid since. Maybe be something to look into if you're running any other Trend products.

jibtech

TrueCrypt/VeraCrypt would be a good free solution.

Otherwise, I would look at PGP.

mgeoffriau

Svoboda wrote: »

We're using Trend's Data/Mobile Armor in our organization. It was shaky when they first rolled it out but it's been pretty solid since. Maybe be something to look into if you're running any other Trend products.

We also used Trend FDE at my previous company. My experience is similar to yours, we had lots of issues early on but over time they improved the product significantly. We still struggled with two significant problems:

1) Password update and change management -- Trend FDE just wasn't great at keeping the preboot credentials synced with the AD creds. Initially, the preboot client did not include any wifi drivers, so every laptop user had to remember to plug into the network before booting when they needed to update their password. If they didn't, the passwords would get out of sync and they'd have to remember two passwords (leading to lots of HelpDesk calls). Even after we started using the updated client with wifi drivers, syncing was pretty hit or miss.

2) Black screen with a cursor -- We continued to run into an issue where the machine would boot to a black screen with nothing but a single blinking cursor in the top left corner. Once this happened, the only fix was to completely decrypt the drive and then re-encrypt. We went around and around with Trend on this issue with no resolution. At various times they tried to tell us it must be a drive failure issue or possibly a hardware driver issue, but could never explain to us why these problems would magically disappear as soon as we decrypted the drive.