IBM Security Subsystem (T43)

Message

arjunrc · #1 Post by **arjunrc** » Sun Sep 04, 2005 10:11 pm

Hello,
I have a few questions on the IBM security subsystem which I recently installed (CSS and related).

1) I am a tad disappointed with IBM CSS. It seems, to protect a folder or file, I need to right click the folder and click on 'Encrypt' which in turn encrypts the entire folder/file with the extension of $enc$

The problem with this approach seems to be that to be able to read it, I need to decrypt the file - and if I forget to re-encrypt in back, I am assuming everyone else can read it too.

Am I missing something ? I was expecting that I could 'protect' a file/folder in a way that I don't have to manually encrypt the data back after reading its contents. What I want is that once a folder is 'encrypted' it renders the contents unreadable and on the fly decrypting/and re-encrypting should happen as I enter and leave that folder.

2) If the CSS subsystem is incapable of this, would you suggest some alternate freeware solution that meets my requirement ?

3) If I do use IBM CSS to 'protect folders' and I sync these folders with my Home PC - which is a Dell, how do I unprotect and view files in my home PC ?

4) Finally, I would still like to use Fingerprint logon as well as Password Manager - I am assuming I can use this irrespective of whether I install CSS or not, correct ?

thanks
arjun

arjunrc · #2 Post by **arjunrc** » Sun Sep 04, 2005 10:16 pm

Oh never mind

I just discovered that i need to download an FFE plugin for transparent protection. I would have thought this would be included in my distribution.

regds
arjun

krma-thkpds · #3 Post by **krma-thkpds** » Mon Sep 05, 2005 12:58 am

With the newest available CSS software there you have an option of Securedisk. Allocated file of your choice, which en/decrypts files or whole folders on the fly.

arjunrc · #4 Post by **arjunrc** » Mon Sep 05, 2005 7:04 am

Hi, I just downloaded and installed FFE. It looks like when my PC boots up, and I log in, FFE asks me for my passphrase. Is it possible to connect this to my fingerprint reader ? I mean, anyway, when I log in, CSS asks me for my fingerprint. If that authenticates, then FFE should not be asking me for my passphrase at logon.

IBM CSS Version:5.41.106.0
FFE: 2.10.009.0

regds
arjun

krma-thkpds wrote:With the newest available CSS software there you have an option of Securedisk. Allocated file of your choice, which en/decrypts files or whole folders on the fly.

krma-thkpds · #5 Post by **krma-thkpds** » Mon Sep 05, 2005 5:03 pm

Where have you found the FFE plug in. I am not familiar with it, but I would like to try.

Have you installed the latest version of CSS? Did you enable secure disc option? I was trying to configure the policy of logging with fingerprints myself but couldn't make it work. It always prompted me for pass.

arjunrc · #6 Post by **arjunrc** » Mon Sep 05, 2005 9:22 pm

Hi,
I did a search for 'File and Folder Encryption' in the IBM support site - and downloaded it - its around 1.x MB. No, I did not download the latest CSS - it was a whopping 14meg and I am on travel with a dialup.

Once I get back to the US end September, I will download the latest CSS and see if it is any difference. The version of CSS I have does not have any secure disk option.

regds
arjun

krma-thkpds · #7 Post by **krma-thkpds** » Tue Sep 06, 2005 1:28 am

Yes I know. The older version didn't have the secure disc. I was really surprised in a good way when dwnloading the newer version. It seems to be quite an upgrade from older one. Try getting ethernet or wireless somewhere and DL it. Think you can make good use of the feature if need encryption on the fly.

yossarian · #8 Post by **yossarian** » Thu Sep 22, 2005 7:35 pm

Is FFE even available anymore? I click on the IBM links for FFE 2.01 or greater, and it just dumps me onto the site for CSS 6.0

CSS 6.0 as far as I know, only has the securedisk thing. I cannot see any options in CSS 6.0 that allow me to configure FFE or an indication that FFE is even included.

arjunrc · #9 Post by **arjunrc** » Sun Sep 25, 2005 9:35 am

krma-thkpds wrote:Yes I know. The older version didn't have the secure disc. I was really surprised in a good way when dwnloading the newer version. It seems to be quite an upgrade from older one. Try getting ethernet or wireless somewhere and DL it. Think you can make good use of the feature if need encryption on the fly.

Hi, I just downloaded SecureDisc - unlike FFE, secure disk requires me to create a fixed volume to store files - in other words, its like an encrypted virtual drive as opposed to on the fly file protection on existing physical folders.

regds
arjun

arjunrc · #10 Post by **arjunrc** » Sun Sep 25, 2005 9:40 am

Hi, FFE is still offered as a separate file
Go to: http://www-307.ibm.com/pc/support/site. ... estyle=ibm
let it detect your system (or specify it on your own),
and then go down to security software - you will see FFE

regds
arjun

yossarian wrote:Is FFE even available anymore? I click on the IBM links for FFE 2.01 or greater, and it just dumps me onto the site for CSS 6.0

CSS 6.0 as far as I know, only has the securedisk thing. I cannot see any options in CSS 6.0 that allow me to configure FFE or an indication that FFE is even included.

IBM Security Subsystem (T43)

IBM Security Subsystem (T43)

Who is online