I apologize in advance for my abundant ignorance here. Please bear with me and let me explain what I'm trying to do first, and then I'll get to my questions.
I'm trying to set-up encrypted USB drives for several coworkers. I used the excellent instructions in the following link to setup the USB drives so they automatically prompt for a password when they are inserted:
However, I know the users I'm doing this for, and there is zero chance that they will always remember to dismount the drive explicitly when they are done. The likely use case is they put in the drive, copy some files to it, and immediately yank it out to take it home.
I have three questions:
1) What happens exactly if you pull out the USB drive without dismounting the TC drive? It seems a subsequent user on the machine might have access to whatever files were already in memory. Does it also put the integrity of the TC data file at risk?
2) Is there a solution to this that does not involve the user explicitly dismounting? I thought about trying to set it up to auto-dismount after 1 minute, but that isn't really ideal. I know on the Kingston USB drives, you can pull the drive out without dismounting and have many fewer problems that seems to happen with this TrueCrypt solution.
3) Is explicitly having to dismount something that would be the case no matter what encryption you used? That is, the drives are Lexar Jump Drives and they came with SecureII software from Lexar. I found it clunky and greatly preferred the way you could setup TrueCrypt to start. But do other solutions handle pulling out a USB drive without dismounting any differently?
Without solving that, I'm certain users will use the drives without encryption. They claim that when they use an unsecure USB drive now and yank it out without dismounting, they never have any problems.
Thanks in advance for any advice. It would be GREATLY appreciated!