[FDE] Fw: FDE - Can we manage it?

[Chip Coy]

Manageability is a key ingredient to getting a full disk encryption 
solution accepted by an organization.

Utimaco's enterprise solution has good key management and central 
administration (that is, some way for the help desk to let someone who has 
forgotten their passphrase but can provide enough other information to 
assure identity back into their laptop): http://www.utimaco.com

I've heard the same thing from one of my clients about SecureDoc: 
http://www.winmagic.com/solutions/securedoc-ent.html

Chip Coy
Associate Partner
Security & Privacy Services - http://www.ibm.com/security
Phone: 1-512-823-0728, mobile 1-512-848-6323, fax 1-845-264-6126
Assistant: Julia Martin, juliamtn at us.ibm.com, 1-317-566-4081
----- Forwarded by Chip Coy/Austin/IBM on 11/08/2006 01:18 PM -----

"Laundrup, Jens" <Jens.Laundrup at METROKC.GOV> 
Sent by: fde-bounces at www.xml-dev.com
11/08/2006 11:44 AM

To
"Saqib Ali" <docbook.xml at gmail.com>
cc
fde at www.xml-dev.com
Subject
[FDE] FDE - Can we manage it?






After many years in the area of cryptography, I have seen that it can be
managed the hard way. 

Saquib, 
Of the products you tested, you covered access times, features, price
and such.  You did not reference any remote management capability to
speak of.  Are you considering adding that at a future date?

All, 
I am embarking on a major encryption initiative where I am starting with
FDE for laptops (approx 2000), but them moving on to desktops (approx
8000), servers (800-900) and storage (tapes, then e-mail etc.  As you
all know, there are many systems out there that do some segment very
well and a few that do many of them.  Each vendor is also very good at
presenting strong arguments for selecting their products. 

The problem is that key management has always been the bane of my
existence.  Is there a product that you know of that is capable of
managing and controlling keys effectively (ie: does not require a team
of people working full time on key management.

Jens 

_______________________________________________
FDE mailing list
FDE at www.xml-dev.com
http://www.xml-dev.com/mailman/listinfo/fde
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.xml-dev.com/pipermail/fde/attachments/20061108/a1e4f328/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 7599 bytes
Desc: S/MIME Cryptographic Signature
Url : http://www.xml-dev.com/pipermail/fde/attachments/20061108/a1e4f328/attachment-0001.bin