Client Security Subsystem

[michaelj]

I'm thinking of installing the software after mulling it over for the last few months.

Is there any performance degredation?
Is the Bootup time increased dramatically?
Will it affect my R&R backups to an external USB Hard Drive either restoring older images or making new ones?
Other than installing Client Security Software v5.41, is there any other software that needs to be installed?

I'd appreciate info from those that have installed it, particularly whether you're pleased you did it.
Mike

[s0larian]

The logon time is being increased using UVM because of the communication with the TPM Chip. It takes about 10-15 seconds longer. Usually you can live with it but if you logoff and logon very often it can get annoying. And you can use file encryption even without using UVM (then you have to wait this 10-15 seconds when you de- or encrypt your first file).

There is no problem with R&R, just make sure that you additionaly backup the CSS keys on CD or diskette, just in case. If your Thinkpad needs a motherboard replacement then you can restore the keys into the TPM chip again on the new motherboard.

If you look for max security, think about Utimaco Safeguard Easy 4.1. It ties in IBM CSS and R&R with the TPM chip and encrypts the whole disk. That's what I am using, works very well. Just plain CSS has only security for the folders or files you encrypted yourself by hand. UVM alone is almost no security at all, because you can switch it off by disabling the TPM key in the bios (of course with CSS encrypted files are still not accessible).

Make sure you read the documentation very well, since data loss can always occure when encryption comes into the game.

[michaelj]

SO UVM can be disabled by going into the BIOS?
That doesn't sound good.
Encrypting the files should at least keep the data safe.
But I wanted to lock a thief out completely.
Found the Ultimaco website-277 Euros -ouch!
But maybe worth it for those who really value the security
Thanks
Mike

[s0larian]

In Germany you can get Safeguard Easy for about 175 Euro, so perhaps there is some cheaper place in the US, too. Or try to call IBM, they might sell it also (at least the CD without Licence you can get there: http://www-132.ibm.com/webapp/wcs/store ... lCurrId=73)

If you don't want to worry about a stolen Thinkpad (at least because of sensitive date), this is defintely the way to go. There is nothing comparable out there, because Safeguard is the only tool supporting IBM's TPM Chip (which indeed is a huge bonus because the keys cannot be accessed by anyone).