On Sat, Aug 21, 2010 at 1:08 PM, Edward Ned Harvey <[email protected]> wrote: > Presently, I have Mac and Windows laptop users. The mac users use encrypted > sparsebundles, and the windows users use TrueCrypt for encryption. There > are a lot of reasons whole disk encryption would be desirable - mostly in > terms of backups. > > There are a lot of whole disk encryption solutions out there. I can simply > stab into the dark and start trying them ... But I thought perhaps I could > benefit from experiences that have been had already... > > Anybody care to offer their experiences?
I used to use CompuSec Free which was great but they don't officially support Win7, and 64-bit not at all. We've moved to Truecrypt, which is great from a cost and open source standpoint, but its sorely lacking in some Enterprise areas: - No ability to reset passwords with an admin reset code: The truecrypt method of requiring the rescue ISO is unsustainable in any medium-sized organization (more than 30), especially one with many people traveling. - No ability to boot OS using admin password or rescue ISO: When applying updates or something off-hours, there's no way to reboot without knowing the user's password or resetting it to the one on the rescue ISO. - No password expiration or complexity checks on passwords I realize you get what you pay for, and the core of TC is excellent. I would just like them to implement some of these kinds of features. Maybe in the next release. _______________________________________________ Tech mailing list [email protected] http://lopsa.org/cgi-bin/mailman/listinfo/tech This list provided by the League of Professional System Administrators http://lopsa.org/
