Rescue and Recovery 3 - Utimaco Privatedisk

[dd]

http://www-307.ibm.com/pc/support/site. ... TVAN-RNRDL

So this version of R&R has the Thinkpad client security solution complete with Utimaco Safeguard Privatedisk.

I was wondering if any body had had much experience with the Utimaco Safeguard software program?

I just wanted to secure some files in case my laptop got stolen. Obviously I have the laptop password protected etc . . but guess that encrypted files are the way to go . . . as I am slightly paranoid.

Will this software time out of is it safe to use. with no time constraints?

Any comments appreciated.

Many thanks

[boofoo]

I tried Privatedisk, and didn't see much point in using it. It creates a virtual disk as a big file (you set the size beforehand), and encrypts it using the Thinkpad's built-in encryption hardware.

But I haven't found any advantage to this system over XP (Pro)'s built-in NTFS file encryption. And I'd also worry that if my Thinkpad ever dies, I could use my backed-up EFS key to recover my files from any computer I pop the HD into, but if it requires the Thinkpad encryption hardware that wouldn't be the case.

Anyone see a particular advantage to using Privatedisk?

[dd]

Hello boofoo

mmmmmmm

Actually I overlooked the XP encryption process. I have just given it a go . . . and it seems to work rather well indeed!

http://www.practicalpc.co.uk/computing/ ... crypt1.htm

has the info required.

Now . . what are the upside / downsides to using the inbuilt encryption. Maybe the more educated onthis forum could provide an answer

Many thanks again

[s0larian]

One big advantage of SG Private Disk is that it works on network drives. If the data container is stored i.e. on a NAS device (i.e. like the linksys NSLU2) you can still access it with your Thinkpad.

Another advantage is that you can use (if you want) in addition certificates stored in the IBM TPM chip instead of using passwords for SG Private Disk. If you use IBM CSS UVM you just have to authenticate once and after that you can use the certificate to open an encrypted container. In reality this means, after authentication with UVM you need just one mouse click to open an encrypted container without entering the password again.

In addition it is just more secure using the TPM chip for storing the keys instead on the harddisk.

Alltogether SG Private Disk is a very nice easy to handle tool. It is like Truecrypt whith some additional features like network, TPM chip and certification support (thought Truecrypt has other nice features SG Private Disk is missing).

[mephie]

It's also pretty flexible. You can do stuff with it you can't do with other encryption programs.

For example, I have a smart card reader installed and integrated with ESS/SGPD. When I put in my smart card, SGPD/ESS reads the certificate, prompts me for my finger print which, once provided, allows the software to mount the virtual disk.

Overkill? Maybe. But I have a lot of highly sensitive data I really care about. Security in layers. It's the best method. I haven't found another encryption program that will let me use that type of authentication scheme.