What Hard Disk encryption do you use?

[humbletech99]

I need to find good hard disk encryption software for windows and was wondering what everyone else out there uses.

Ideally I'd like to be able to encrypt entire disks, although I'm not sure how booting windows would work then. This is for both workstations and servers. If not boot partition, then at least data drives like d: and e:

[andsome]

I am very interested in exactly what you mean.

[humbletech99]

I have been asked to look in to a way of encrypting the data stored on disk on our machines to mitigate the risk of data theft from stealing the drives.

I want to know what software people out there use to encrypt their data on disk.

[Panarchy]

If this is the answer your looking for, I use bitlocker.

Also what is the importance of your data?

[-pops-]

I'm always scared of any sort of encryption after Steganos Safe decided that the password I was using was not the correct one and wouldn't let me into the files. Those files are still on a drive somewhere, completely inaccessible.

Steganos were as useful as a sultana in a pot of caviare when I asked them what I could do. Their reaction was that I was using the wrong password or key to access the data when I knew very well I wasn't.

Think twice before you proceed and consider other methods of protecting your data such as removable hard drives.

[humbletech99]

Also what is the importance of your data?

oh, nothing at all, really, just the lifeblood of the company and possible ruin should it get out, especially when all our corporate clients cut us off....

-pops-: noted, but we are obligated to for a client. It's a risky thing to do, all I can do is take precautions hope nothing goes wrong.

[Panarchy]

In that case, set your drive to self destruct if someone tries to move or crack into them!!!

[humbletech99]

Panarchy: you must be using Vista, right?

I have only just these people here to finally get rid of most NT, all windows 2000 and XP. Bloody Windows 2000. Shouldn't be around in this day and age. So what are the chances I'm rolling out Vista any time soon?

Also, I have servers, and longhorn server isn't going to come out for a while.... which leaves me needing some app in between now and then.

[-pops-]

My son owns and runs a multi-million £££££ business. I build and maintain all of his computer equipment for him - mainly because he is such an awkward cuss that he wouldn't be able to get his exacting requirements from a commercial builder.

All of his business sensitive data is stored on removable drives (as outlined above) and these are taken out of the machines at night and stored in a safe or off the premises. The machines used for commercial development work are not normally connected to the Internet so there is no danger of data theft by that method.

Similarly, even though I am nominally retired, I do some research and development and my main machine here contains commercially useful information in respect of work that I am involved with but, at the end of each day, I move all work on to an external USB hard drive for safe keeping.

Drive caddies and external hard drives are commonly available and, in my opinion, are much more reliable and safer than using encryption.

My adventure with Steganos was irritating rather than important - the files locked away were just a trial of the software but I'm sure you can imagine the consequences if there was anything real in there - far worse than having the data stolen as at least in that there is a chance of retrieval if the thief is caught.

In addition to all of the above, I ensure there is a full backup of all systems.

[humbletech99]

yes, but I'm really talking about servers, laptops etc. You can't go pulling the hard drives out of servers or moving vast quantities of data every night. Same goes for laptops. It's just to inconvenient for users. For them it's better to have to put in a password before the thing boots and then work normally. If the laptop is stolen, it is useless to the thief the next time the thing is switched on.

[-pops-]

Each to his own, of course. I just relating my experiences and offering some suggestions. You can pull hard drives in caddies out of servers just as you can have external drives for laptops.

Remember that most varieties of windows you can insert a password for each account on a computer without any extra software.

[Panarchy]

Also... It is good to have a fingerprint reader.

[hunren]

I know a encryption program named Data Security Wizard. You can find it from: http://www.easeus.com.

[cozofdeath]

I seen this in a pcworld magazine. If you like pgp you'll like this. Heres a link and short summary.

Full Disk Protection

PGP Whole Disk Encryption locks down the entire contents of a laptop, desktop, external drive, or USB flash drive, including boot sectors, system, and swap files. The encryption is transparent to the user, automatically protecting data.

[Scarecrow Man]

Here's one I had a go with, but never got too deep into it.

Free open-source disk encryption software for Windows XP/2000/2003 and Linux -- http://www.truecrypt.org/

Main Features:

Creates a virtual encrypted disk within a file and mounts it as a real disk.

Encrypts an entire hard disk partition or a storage device such as USB flash drive.

Encryption is automatic, real-time (on-the-fly) and transparent.

Provides two levels of plausible deniability, in case an adversary forces you to reveal the password:

1) Hidden volume (steganography – more information may be found here).

2) No TrueCrypt volume can be identified (volumes cannot be distinguished from random data).

Encryption algorithms: AES-256, Blowfish (448-bit key), CAST5, Serpent, Triple DES, and Twofish.

Mode of operation: LRW (CBC supported as legacy).

Conceived in 2003.

Further information regarding features of the software may be found in the documentation.