[FDE] IT support accounts on FDE secured computers

[Bryan_McAninch at McAfee.com]

I believe most enterprise-level FDE solutions offer an
administrative/recovery account to unlock the drives.

-----Original Message-----
From: fde-bounces at www.xml-dev.com [mailto:fde-bounces at www.xml-dev.com]
On Behalf Of john.veldhuis
Sent: Monday, August 20, 2007 2:27 PM
To: fde at www.xml-dev.com
Subject: Re: [FDE] IT support accounts on FDE secured computers

Hi Saqib,
 
There are several ways of doing this, ranging from logon tokens for IT
staff, via C/R to allow a technician one-time access to a drive, to
seflhelp websites/voice recognition systems. In my experience, the C/R
is most used.
 
Regards,
 John
 

________________________________

Van: Ali, Saqib [mailto:docbook.xml at gmail.com]
Verzonden: vr 17-8-2007 17:09
Aan: FDE at www.xml-dev.com
Onderwerp: [FDE] IT support accounts on FDE secured computers



As it turns out, deploying FDE to users is not the most complex task -
providing day-2-day IT support is.

My cousin works for a medium sized financial institution which
recently deployed FDE. Providing day-to-day IT support to the users is
becoming a hassle. Every time the IT support person has to work on
laptop the owner must be present to enter their credentials into the
pre-boot authentication.

Can anyone give me some real-word examples of how other institutions
have tackled this issue? How do they the allow the IT support person
to work on the laptop if the user is not present and laptop is
turn-off?

saqib
http://www.linkedin.com/in/encryption




_______________________________________________
FDE mailing list
FDE at www.xml-dev.com
http://www.xml-dev.com/mailman/listinfo/fde