[FDE] New DoD encryption mandate and TPM requirements
Ali, Saqib
docbook.xml at gmail.com
Wed Aug 15 23:15:58 MDT 2007
John Grimes' (DOD chief information officer) July 3rd memo is
mandating encryption for all sensitive but unclassified information on
mobile devices in compliance with FIPS 140-2. "Mobile devices"
include laptops, PDAs, CDs, flash drives, etc.
See:
http://iase.disa.mil/policy-guidance/dod-dar-tpm-decree07-03-07.pdf
Also all new computer assets (servers, notebooks, desktops, PDAs) must
have TPM (if available). I guess this is good news for Wavesys
<http://www.wavesys.com/ >. Wavesys is the only company that makes
enterprise grade TPM management suite that can be centrally managed.
But I think more and more FDE vendors will now start supporting TPM
for encryption key management, and trusted device management.
More information about the FDE
mailing list