[FDE] Can you keep a secret? This encrypted drive can...

[Bryan Glancey]

1) Does mobile armor uses cached credential for pre-boot auth or does
it actually go and authenticate the user over the network in
real-time.

No cached credentials (unless you are off line) . It authenticates the
user over the network.

2) Does it support Active Directory accounts? If so, does mobile armor
act as a kerberos client participating in a kerberized environment? or
does it use LDAP  to talk to the server or similar?

You are correct. It supports AD accounts and does the Kerb exchange from
the pre-boot environment.


------------------------------------
Mobile Armor
Bryan E. Glancey
Co - Founder & Chief Technology Officer
bryan at mobilearmor.com
400 South Woods Mill Rd.
Suite 110
Chesterfield, MO 63017
tel: 877-276-6778
fax: 877-277-7369
mobile: 314-495-2048
http://www.mobilearmor.com/
------------------------------------ 

-----Original Message-----
From: Saqib Ali [mailto:docbook.xml at gmail.com] 
Sent: Wednesday, November 08, 2006 8:26 AM
To: Bryan Glancey
Cc: curtw at siu.edu; fde at www.xml-dev.com
Subject: Re: [FDE] Can you keep a secret? This encrypted drive can...

Bryan,

>   Mobile Armor does this authentication at preboot with network
connectivity
> so it can sync realtime with things like your LDAP server (ie change
your
> password in the pre-boot and it changes your windows password)

This is interesting.  I have a couple of questions:

1) Does mobile armor uses cached credential for pre-boot auth or does
it actually go and authenticate the user over the network in
real-time.
2) Does it support Active Directory accounts? If so, does mobile armor
act as a kerberos client participating in a kerberized environment? or
does it use LDAP  to talk to the server or similar?

saqib
http://www.full-disk-encryption.net