Looking for HIPAA compliant encryption software for external USB hard drives of 1TB and larger

I'm looking for paid or free encryption software ONLY for encrypting USB hard drives of 1TB or larger (not flash drives) attached to Windows Server 2012 R2 and Windows Server 2008.  More info:

Needs to be HIPAA compliant
Looking for encrypting entire partitions--not just files and folders.  It is for backup USB drives.
Product must be compatible with Server 2012 R2 and Server 2008.
Need to encrypt USB hard drives of over 1TB attached to a Server.
Need to encrypt existing PARTITIONS so encryption speed is important.
Needs to mount the USB drives (and encrypted partitions) automatically on startup.
Can be paid or free, but an inexpensive paid product might be better for getting support.

Thanks.
b1dupreeAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

DMTechGrooupCommented:
Have you looked into BitLocker that comes with Windows?  There are some minimum specifications of your bios and such but that is one option.

Another is to use USB hardware that has encryption builtin like this

http://www.apricorn.com/products/hardware-encrypted-drives/apricorn-padlock-usb3.html
0
b1dupreeAuthor Commented:
Thanks DMTech.  I can't use Bitlocker because of the TPM that is required.  I installed the software but it indicates that the TPM is not present.  I thought that Proliant ML350 G6 has the TPM built into the BIOS but apparently not.
Don't want to purchase additional drives with encryption built in because I already have the USB drives.
0
DMTechGrooupCommented:
According to HP you have TPM.. Maybe a Bios update or a Bios setting?

http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c01713311

Contact HP to verify..
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Become a Certified Penetration Testing Engineer

This CPTE Certified Penetration Testing Engineer course covers everything you need to know about becoming a Certified Penetration Testing Engineer. Career Path: Professional roles include Ethical Hackers, Security Consultants, System Administrators, and Chief Security Officers.

b1dupreeAuthor Commented:
Will check it out--thanks.
0
Rich RumbleSecurity SamuraiCommented:
No you don't need TPM when using BL on USB, it's called Bitlocker-2-go...
http://technet.microsoft.com/en-us/magazine/dd490967.aspx
https://www.cityu.edu.hk/csc/deptweb/support/guidelines/bitLocker_to_go_userguide.pdf
Also what is the point of having encryption if the drive is automatically "opened" when it's plugged in? That means you have no encryption at all. This is not how you create proper encrypted backup's. You should have software, backup software, that is doing the encryption for you, M$'s own products do not offer that.
Also have a look at my article here, and see what encryption does and doesn't do to protect your data:
http://www.experts-exchange.com/Security/Encryption/A_12134-Choosing-the-right-encryption-for-your-needs.html Bl-2-Go should be HIPAA compliant, but not just any old software/hardware will be.
-rich
0
b1dupreeAuthor Commented:
Hello Rich,
I understand about using software that encrypts but the encryption in this situation encryption is important if the USB drive is removed and attached to another system.
BitLocker looks great and the right choice BUT I see BitLocker to go for Windows 7 but can it be used in Server 2008 (i.e. SBS Server 2008)?  I need a system that will work with that Operating System.
Thanks.
0
Rich RumbleSecurity SamuraiCommented:
You have to enable Bitlocker on 2008 first, but it works exactly the same. But I would suggest getting backup software that supports encryption, there are many of those, and that's the proper way to do a backup.
-rich
0
b1dupreeAuthor Commented:
Bitlocker to go is a good solution but it doesn't work in Server 2008.
0
Rich RumbleSecurity SamuraiCommented:
It does for us, remember you do have to enable BL through the Server Manager, then reboot: http://searchitchannel.techtarget.com/feature/Securing-Windows-Server-2008-Installing-and-turning-on-BitLocker
-rich
0
b1dupreeAuthor Commented:
This is for Bitlocker but not for BITLOCKER TO GO (which is a feature of Bitlocker) which is for external drives.  It appears that Microsoft didn't introduce BITLOCKER TO GO until Server 2008 R2.
0
Rich RumbleSecurity SamuraiCommented:
Ahh I see, your not running the latest, then that is an issue, we started with R2 so that must be  why. I assumed that since 7 had it from the start, that 2008 would of too. 2012 works from the start, I've just verified though.
-rich
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Encryption

From novice to tech pro — start learning today.