Encryption

[Sasha]

I have recently formatted my HDD into multiple partitions and reinstalled the OS and other IBM software (machine details in sig) following the procedure outlined in this forum.

I was using IBM's File and Folder Encryption (FFE) software Ver. 2.10 along with Client Security Software Ver. 5.41. After reformatting, I can encrypt files/folders only on the C drive. When I right click on any files/folders on the remaining hard drives, I do not get the "Encrypt" option in the context menu. I only get an option "Folder Status", which displays a message window "The folder is unprotected" upon clicking.

What do i need to do to enable file/folder encryption on the remaining drives? Can anybody help me out?
Rolling Eyes

TIA

Sasha

[s0larian]

CSS FFE is unfortunately not capable to encrypt on any other drives or partitions than c:\

Perhaps you should try something like Truecrypt (freeware).

[w0qj]

practically, perhaps it would be more useful if you only add BIOS and Hard-Drive password to access your computer.


if your OS goes down, an encrypted hard drive would make data recovery very difficult...

[Sasha]

..everyone.

Being new to the world of IBM and ThinkPads, I thought that CSS and FFE are pretty cool tools. But as I have read somewhere else, they are still a little, shall we say, "unpolished".

The restrictions IBM has set up by making CSS and FFE work only on one partiition is one I cannot willingly accept, coz I wouldn't want to put all my eggs in one basket.

Guess I have to look at other options for securing my data.

Once again, thanks a lot for the replies...

Ciao

Sasha

[scottv]

Guess I have to look at other options for securing my data.

Let us know what you find, I am very interested in this.

[arion]

IBM and all the others (I am just dumbfounded at the fact that IBM is the ONLY company doing any security on devices) need to put hardware encryption into computers particularly mobile computers as so many are stolen or lost.

The hardware encryption goes between the hard drive (or CF etc) controller and the hard drive and the key is produced by preferably biometrics like fingerprints, eye scan etc or even passworded.

[s0larian]

The best way for securing Thinkpads is this:

http://www-132.ibm.com/webapp/wcs/store ... lCurrId=73

Works great with Rescue and Recovery and you can fully encrypt up to 4 partitions or the whole disk. But the price for the above link is without the license. A license I think costs about 150-200$. (look at Utimaco Website)

[Sasha]

..what were the folks at IBM thinking? They got this cool Embedded Security System chip on board.....which is a very good thing security-wise, but then they hobble users by having the entire security system work on only one hard disk. Right now, this is what I am doing:

1.Make multiple partitions on my hard disk
2.Put all my sensitive data on hard disk C: (against my wishes, )
3. Encrypt disk C:

I am looking for software which takes advantage of the onboard security chip. Will let you know if I find anything else...

Ciao

Sasha

[Moroner]

And what is wrong with using the encryption capabilities of Windows XP Pro? Are your filenames already giving too much away?

[s0larian]

Utimaco Safeguard Easy 4.10 takes advantage of the IBM Security Chip. This is the only peace of software except IBM CSS.

[JohnDrake]

Soon Utimaco's "Private Disk" should be available for use on Thinkpads, and will allow for virtual encrypted drives to be created on a variety of media. Probably for free.

[Master One]

Hm, this discussion makes me believe, that the IBM security features are not that mature and advanced after all (and who is willing to pay an additional amount for a third party software).

I am still wondering, if anyone has got any results using the functions of the TCPA security chip & fingerprint reader under Linux, since this will be my prefered OS.