Who's installed the client security/uses the security chip

[dmcgibbo]

so who's installed the client security to actually use their embedded security chip? what exactly does it do? i mean, i have bios and hard disk passwords right but i haven't enabled them b/c i don't want to have to type them in every time i start up my pc haha.

what does installing and enabling the security chip do? i don't want to slow down my pc or cause it any more trouble, but if i can use it to password protect files/folders that would be cool.

[NoBob]

I did. If you do it, remember to set the UVM password, so that when you boot up again, you can get back into Windows. But, you can always go into Bios at boot up and disable the chip and get back into Windows that way, thereby bypassing the client security software. I uninstalled it and have just set a power up password. Will put on a hard drive lock too while travelling.

NoBob.

[s0larian]

With IBM Client Security you can encrypt files/folders (manual or with additional software on the fly) and replace the windows logon with UVM. It works quite well, but the windows logon take additional 10 sec for communicating with the security chip. Make sure you read all the manuals carefully because dealing with security software can cause loss of data. Just use it if you need it, not just for fun.

I disabled the security chip and replaced IBM Client Security with Safeguard Easy 4.0 from Utimaco. It encrypts the total harddisk, and not just certain folders or files. After the bios boot Safeguard asks you for the password, but it can forward this information to the windows logon, so you don't have to authenticate twice. It's fast and you don't recognize speed issues, even with 256 bit AES or Rijndal algorithms.

If you want the most secure Laptop possible, install Safeguard Easy and encrypt your full harddisk, enable Harddisk password and Superuser password (for the bios). Just forget about the User Password, it's not secure at all.

[dmcgibbo]

i was going to use it for the file encryption feature but then i saw that it doesn't work with rapid restore so i said screw it.

eh, my data isn't that private anyway and i can use AxCrypt to encrypt any files that are really important