Link to home
Create AccountLog in
Avatar of emagination
emagination

asked on

Laptop security

We have some proprietary information that is often in use on our laptops.  Management is concerned about the security of that information should the laptop be lost.  What products do you guys use on your laptops to secure your data?  I've been having some problems with EFS and certs and management wants to go the route of a third party solution.
Avatar of Will Szymkowski
Will Szymkowski
Flag of Canada image

Hello there,

Have you tried something like Fingerprint Security? Pretty useful I would say and also secure. Some are better then others obviously more expensive the better.

Here is one that Dell offers that isn't at a bad price...
http://search.dell.com/results.aspx?s=gen&c=ca&l=en&cs=&cat=prod&k=fingerprint+security

Hope this helps
3rd party encryption is highly suggested over EFS. EFS can be used and is secure, but not out of the box, you must take extra care and steps to properly secure EFS encrypted data, mainly, you have to export the keys off of the HD in order to secure the LT, because if you don't, the keys are still on the HD, and anyone can find them if the LT is stolen.

I'd suggest TrueCrypt, it's safe, secure and easy to manage. Data is never written to the HD in plain-text, its unencrypted in memory, if power is lost while a file is decrypted, there is no need to worry that the data wasn't re-encrypted back to the HD, because it never gets written to the HD unencrypted. There are other benefits also: http://www.truecrypt.org/   http://www.truecrypt.org/docs/intro.php  
You can assign more than one person to an encypted file, and more than one recovery key also. http://www.truecrypt.org/docs/keyfiles.php
-rich
Windows XP has a built in encryption of the OS.... it is pretty effective.  I once did this as a project to show how easily you could hack into an OS (XP, Linux, and Mac) via local access (AKA laptop stolen)...  However, they all offer encryption of the OS, in that case we were unable to hack into the data.

Here is the MS article on XP's encrypted file system

http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx
Avatar of ppfoong
ppfoong


Modern laptop harddisk should come with harddisk password locking feature. The harddisk cannot be accessed unless the valid password is provided.

Check for this feature in your BIOS setting.

There are always varying degrees of security and they all have a particular cost.  

Has management given you $$$s to spend or are they looking for some basic security functionality with little cost or a military type solution that costs a couple of hundred each laptop???

The most basic of all, enable password security in the BIOS.

Consider a hardware and software solution running in conjuction to give you the highest level of protection (fingerprint and encryption) or maybe wireless proximity security.

There are many choices available in the marketplace, you just need to determine what you can afford....

Here is a great link that covers a great deal about Laptops and Security

http://labmice.techtarget.com/articles/laptopsecurity.htm

All The Best
OziOziOzi
Avatar of emagination

ASKER

Thanks for all the great suggestions.  I'm going to have to take some time and explore each of them.
ASKER CERTIFIED SOLUTION
Avatar of Rich Rumble
Rich Rumble
Flag of United States of America image

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
We've installed TrueCrypt and our COO is evaluating it now.