Can I do a full drive encryption?

Hi All,
When installing a fresh 2012 std, can I do a full drive encryption?
Any performance hit?
-T

Actually, if you had read the link I posted, you would have found I was in error in regards to the lack of encryption during installation. My experience with BitLocker was Windows 7/Windows 2008 R2. A new feature in 2012/Windows 8 is drive encryption
during installation. That is on the link I posted.
And, I don't know where you get the idea that it is not full drive encryption. That is exactly what BitLocker is.
Microsoft also provide EFS - encrypted file system. That is a selective file encryption technology. Sounds like you might have gotten that confused with BitLocker. They are two, totally different things.
As for installing it in a VM, that requires other steps. BitLocker is hardware encryption, and a VM doesn't have any real hardware. It is possible. I think that is another new feature in 2012 Hyper-V. Reading TechNet is likely to
provide fewer factual errors than reading my post. Sorry.
Free advice is worth every cent.
.:|:.:|:. tim

Similar Messages

Where can I download the FULL driver for my XtremeMusic? (eg. more than just the audio consol

I just bought an OEM XtremeMusic and I downloaded the latest (from 2006) driver from the Creative Lab's website but all it installed was an audio console and the driver itself. I can change most of the settings I need inside the audio console, but isn't there an equalizer I can adjust and more settings? The screenshots of the XtremeMusic software from the website is definitely not the same as the audio console I have. Also, isn't there a CMSS-3D test somewhere? I can't find any of this. Did I miss something on the website that I could download?

Here you go:
http://forums.creative.com/creativelabs/board/message?board.id=soundblaster&message.id=25677

Time Machine not backing up full drive

On my macboook pro late 2009 model with mountain lion 10.8.2 time machine will not back up my full drive. I have 56gb use out of 250gb and only 8gb gets backup . How can i get time machine to back up the full 56gb on the first time of setup time machine? I am useing a hard drive connected to my airport extreme. I have the hard drive setup for one big parition. The size of the usb hard drive is 2tb. I have two users on my airport extreme that can access my usb hard drive. One for my macbook pro and one for my mac mini. My mac mini late 2011 model with mountain lion 10.8.2 useing time machine it can back up the full drive. On my mac mini i have 2.5gb used out of 500gb and time machine can back up 2.5gb on the first time i started time machine. But this is not the case for my macbook pro it will not back up the full used space on the first time i setup time machine. How can i fix this so that time machine will backup the full used space?

If you have more than one user account, these instructions must be carried out as an administrator.
Launch the Console application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Console in the icon grid.
Make sure the title of the Console window is All Messages. If it isn't, select All Messages from the SYSTEM LOG QUERIES menu on the left. If you don't see that menu, select
View ▹ Show Log List
from the menu bar.
Enter the word "Starting" (without the quotes) in the String Matching text field. You should now see log messages with the words "Starting * backup," where * represents any of the words "automatic," "manual," or "standard." Note the timestamp of the last such message. Clear the text field and scroll back in the log to that time. Select the messages timestamped from then until the end of the backup, or the end of the log if that's not clear. Copy them (command-C) to the Clipboard. Paste (command-V) into a reply to this message.
If there are runs of repeated messages, post only one example of each. Don't post many repetitions of the same message.
When posting a log extract, be selective. Don't post more than is requested.
Please do not indiscriminately dump thousands of lines from the log into this discussion.
Some personal information, such as the names of your files, may be included — anonymize before posting.

Full Disk Encryption HP TM2T

Can anyone recommend a full disk encryption software package that won't hang my machine? I tried using Truecrypt v6.3a to encrypt my Windows 7 x64 HP TM2T laptop and I nearly lost everything. After encryption it just hung at the boot screen where it shows the HP logo. Someone said it was a conflict with the Intel Dual processor.
Anyway, has anyone had any luck with full disk encryption?
Thanks!

Hi,
I ahve the exactly same problem, how did you solve this...cant do anything as my computer is totally locked

Can I create a full backup on google drive by moving my user folders to Google Drive Folder?

Can I create a full backup on google drive? Google suggested I simply move my folders (Pictures, Music, Downloads, Documents, etc) into the google drive folder. But these seem to be automated files involved with Mac's organization... will this create problems for my computer? Ie. if I import new photos, or download music, will my computer know where to put it if its in google drive?
If this is a problem, how else could I possibly create a full backup of personal data on google drive (or any similar syncing service, for that matter). iCloud is prohibitively expensive, and programs like crash plan and carbonate run so slowly and bog down my computer so much that they are not worth it. Google drive seems simplest and most competitive in price, but I am worried about moving my folders.
Help?

Google Drive also installs a client--a google drive folder on my hard drive that is programmed to sync changes automatically to the cloud--that allows me to drag and drop. I suppose my original concern was about dragging files from my hard drive (such as "pictures" that would contain my iPhoto library, etc) into it. Would that mess up Mac's internal organizational system? If I drag and drop my pictures folder, music folder, etc. into the google drive client folder in Finder, will those applications still function correctly? Will my mac still be able to figure out where to put photos I import from my camera, etc?
I am only as tech savvy as I have to be to survive professionally as a traveling teacher, so I am looking for something pretty straightforward that will free up some of my brain waves for other activities, rather than remembering which folders I have made changes in and need to sync.

HT201250 I've just used an external drive to back up my Mac with Time Machine. I have Lion, but didn't click and check the "Encrypt Backup Disc". What should I do? Can I delete the external drive and start again, or can I encrypt later?

I've just used an external drive to back up my Mac with Time Machine. I have Lion, but didn't click and check the "Encrypt Backup Disc". What should I do? Can I delete the external drive and start again, or can I encrypt later?

I guess if stolen or lost it would protect my "stuff", and if I'm travelling would protect my privacy.
You must understand the purpose and implications of encryption before deciding whether to use it.
Encryption locks your data with a password. If you forget that password, the data is lost beyond any chance of recovery. Neither Apple nor anyone else will be able to help you recover that data if you don't know the password.
By the same token, the password must be strong enough to provide the security you want. For example, if you're the potential target of industrial espionage by a government or large corporation, you need the strongest possible password. To create and manage such a password safely is a task in itself, not to be undertaken lightly.
If you're only concerned about casual snooping by someone with no special skill, a weak, easily-remembered password is appropriate.
But regardless of the strength of the password, if you lose it, the data is gone forever.
Another point to remember is that if you encrypt your data on one storage device, you must also encrypt it on all other storage devices that would be accessible to the same attacker. Otherwise the data isn't protected. For example, if you keep your computer and your backup drive in the same room, and the internal drive of the computer is not encrypted, then there's no point in encrypting the backup drive.

HT4790 I can not find my hard drive after encryption

I have a macbook pro I upgraded to Mountian lion from 10.6.8.
Went through the encryption process. Now my user can not find his hard drive after a re boot
Steve

Uninstall the program. It should have come with an uninstaller. If not, contact the developer for instructions.

Can host hacker break into guest that uses full disk encryption?

I know it is unlikely but let us say host has got owned, ie a hacker has managed to break into the host.
How would they go about breaking into a linux VM that uses full disk encryption?
They can't mess with the .vmdk without damaging it - it is encrypted by the guest.
They can't use vmrun because they do not know the guest passwords.
They can't attach to processes in the guest with debugging tools because they cannot see individual guest processes.
What can they do? And crucially, what can I do as a countermeasure?

What really matters is WHERE you do the encryption. If the encryption is too low, data in the guest appears unencrypted. If it is in the guest, then the keys live in the guest and since SGX is not around at the moment, keys are somewhere in guest memory even for a little bit of time.
So the real question is what are you trying to achieve?
If you are trying to meet encryption at rest requirements then it makes no difference where you encrypt as the data on the disk will be encrypted and without the key no one can decrypt it. Now if you have keys generated within a VM without using DRNGD or some other high quatlity randomness source, then your keys could be predictable and you need to guard against making it easy for a brute force attack.
If you need to encrypt data in motion?
Then you need to consider how the VM is protected itself, how an application interacts with data to determine during 'motion' if someone should not be accessing the data even though they are already supposedly allowed to do so. Keys are in memory, so therefore you need to guard memory access for those keys to only the application in question. This is the hard part, and requires you to think seriously about logging, key management, etc.
So really what are you trying to achieve?
Best regards,
Edward L. Haletky
VMware Communities User Moderator, VMware vExpert 2009-2015
Author of the books 'VMWare ESX and ESXi in the Enterprise: Planning Deployment Virtualization Servers', Copyright 2011 Pearson Education. 'VMware vSphere and Virtual Infrastructure Security: Securing the Virtual Environment', Copyright 2009 Pearson Education.
Virtualization and Cloud Security Analyst: The Virtualization Practice, LLC -- vSphere Upgrade Saga -- Virtualization Security Round Table Podcast

X220 SSD Drive w/Full Disk Encryption (FDE), Intel 320 or others

Does anyone have experience or recommendations regarding installing an SSD with Full Disk Encryption for the X220?
Solved!
Go to Solution.

I have a 300GB Intel 320 which I installed it myself (cloned the factory install using Acronis). No mSATA drive.
Hope this helps!
I don't work for Lenovo. I'm a crazy volunteer!

Full disk encryption for the Mac ?

I desperately require a security measure against data compromise in the event of a physical theft of one of my Macs.
Is there some full disk encryption solution, similar to the TrueCrypt solution for Windows, that can work with a Mac? (TrueCrypt works on Mac but not its feature of full disk encryption)
Any other ideas on reinforcing security in such physical theft incidents?
Thanks!

Visited http://www.macintouch.com/
PGP Corporation is now shipping PGP Desktop 9.9 for Mac OS X, a major update of the encryption software. Highlights of this release include full support for pre-boot authentication, full support for external drives (including the sharing of Whole Disk Encrypted thumb drives between Mac and Windows clients), use of the FIPS 140-2 validated PGP SDK for cryptographic operations,
http://www.pgp.com/

Winmagic Securedoc and New Macbook Pro for Full Disk Encryption (FDE)

Hi, I wonder if anyone had any experience with this. I've installed a seagate Momentus FDE drive (...421 series) on my new macbook pro and tried installing Winmagic securedoc to manage full disk encryption. It seems that despite all their recommendations re: hibernatemode and lidwake and sleep vs hibernation, the MBP crashes when I close the lid and then awaken it (by opening and pressing the power button). It cannot be awakened via an external keyboard either. Note that both hibernate and sleep work fine without securedoc. As securedoc appears to be the only viable FDE solution, I'd really like to get it working. Has anyone had any luck getting it to work with the new MBPs?

PGP is another alternative as I have used it for the past few years on all of my Macbook Pros. I also own SecureDoc but have not installed it on the new Macbook yet.
I do know that PGP disables hibernate during the install as it can cause problems.

[SOLVED] Chrome OS + Arch w/ full system encryption: Is it possible?

I want to dual boot Chrome OS and Arch on a Chromebook. More importantly, I want to run Arch with full system encryption, such as with dm-crypt.
As I understand it, in order to use full disk encryption, /boot must be a non-encrypted partition. If I didn't want to dual boot CrOS, this wouldn't be a problem. If I change the partitioning, it's unlikely that CrOS will boot.
Has anyone successfully dual booted Chrome OS and Arch with full-disk encryption? And, if so, I'd appreciate your guidance. Thanks!!
[edit] yes. Very straightforward, just read the Wiki
Last edited by Watney (2015-05-26 03:21:50)

What is your threat model?
Owe, and no you can not have hidden-volume with dm-crypt.
If you really want to have a secure OS to boot to.
You should make a small partition on your drive.
Put the tails linux OS .iso on it
https://tails.boum.org/
Then configure GRUB2 to boot the .iso file.
https://tails.boum.org/forum/LiveUSB__4 … __feature/
Now get a micro SD card and encrypt that for keeping data on.
Then if you have to destroy the data, you just snap the micro SD card in a few pieces, but if you don't have time to destroy it then it is at least encrypted.
If you are really worried about like the NSA or FBI getting your data... You probaly should not even have the data in the USA at all.
Instead, rent a VPS in like Malaysia, Russia, Hong Kong, bla, bla bla...
Pay for the VPS with BitCoin, Bitcoin you bought on #bitcoin-otc freenode IRC channel, that you connected to though the freenode TOR-HIdden Service IRC server. You will also want to do some bitcoin Tumbling before you use it. To tumble the bitcoin. You could simply transfer the bitcoin to an account on silkroadvb5piz3r.onion then transfer the bitcoin back to you.
.... OWE, and configure your bitcoin client to connect to the bitcoin network through TOR.
Only connect to the VPS through TOR.
Create a TOR-Hidden service to host SSH on the VPS
Then use like sshfs to mount a remote directory on that VPS.
Then create a TrueCrypt volume on that sshfs mounted directory, and keep your data in that.
===========
How far down the rabbit hole do you want to go?
Last edited by hunterthomson (2012-11-13 01:48:12)

Anyone using SecureDoc Full-Disk Encryption for Mac from WinMagic?

Currently I am using Mac OS X v10.5 on a MBP and want to upgrade to Snow Leopard. I use PGP full disk encryption.
I do not want to wait anymore for PGP v10 before I can upgrade to Snow Leopard. In my search for a replacement for PGP I found SecureDoc Full-Disk Encryption for Mac from WinMagic.
https://www.winmagic.com/products/full-disk-encryption-for-mac
They claim to be Snow Leopard compatible
https://www.winmagic.com/kw/download.php?url=/datasheets/securedocmac_brochure20090925a.pdf
I have two questions:
1) Does anyone have experience with SecureDoc Full-Disk Encryption for Mac from WinMagic?
2) Where can I buy one? PGP has a store where I ordered my copy of the software. But I can't find a store anywhere for SecureDoc. With some trouble I found a reseller in the Netherlands, but they don't reply to any questions.

I am currently testing a trial license from Checkpoint Full Disk Encryption.
http://www.checkpoint.com/products/datasecurity/pc/index.html
The company where I work is a Checkpoint reseller, and normally only has dealings with other companies, not end users. But we arranged a trial license and I can buy a single user license Checkpoint Full Disk Encryption if the test proves Checkpoint Full Disk Encryption is a good solution.
I created a bootable usb disk with Snow Lepoard on it. But I was unable to install FDE on it. After reboot I only get a blank screen, that's it. Probably it isn't supported to boot from a full disk encrypted removable drive, I can understand that.
I can't create a virtual Snow Leopard machine (legal reasons) to test it on. And all FDE solutions I found aren't compatible with Mac Server, which is a shame because you can virtualize Mac Server legally.
So now I am planning to change the hard-disk of my MBP this evening with another hard-disk to test Checkpoint FDE there. I don't want to upgrade my current Leopard installation to Snow Leopard only to discover it doesn't work as expected. I could of-course use my current installation and when it doesn't work rollback to a timemachine backup, but before that I have to decrypt my disk and uninstall PGP witch will take 1-2 days, and encrypt again when the test is over. Not pratical.
I will let you know how the test with Checkpoint Full Disk Encryption went!

Drive encrypted but on network. Need to worry?

Hi. I have a time machine drive encrypted with a really good password. I use that drive to backup my computer. Recently I have attached this drive to another Mac which hosts my website and acts as a server for music as well. I like it like this because I can just connect to my network and backup my computer without having to actually attach my Time Machine disk to my main computer. My server Mac is also accessible over the Internet through Apple remote desktop, or VNC.
It just recently occurred to me that if I can see my server desktop from anywhere in the world I also see my time machine backup drive mounted on its desktop and I can freely access all content of that drive from anywhere in the world. It seems to me that this would compromise security and that the encryption of my time machine drive does not matter at all because it is mounted on my server desktop.
Can anyone suggest if there is a way for me to have that drive mounted on my server desktop, have the server be reachable through filesharing and Apple remote desktop over the Internet and yet have the contents of my time machine drive be as secure as if a burglar steals my encrypted drive?
thank you very much for your suggestions

The normally way for a local time machine backup drive to be used and encrypted is for the entire backup drive to by encrypted. The normal way for a Mac server to provide Time Machine backup access to other Macs is that the other Macs create a disk image on the Time Machine drive being shared by the server. These disk images can be and normally are encrypted.
This second approach means that as far as the server is concerned it only sees the disk image files and not the contents inside them. There is no need for the server to know or store the password to access such encrypted disk images files. Therefore with this approach the contents would be secure even if someone gained remote access to the server.
It sounds like you are using a disk originally setup for local access and at best are mounting it on the server by entering the full disk encryption password. This means that it is completely unprotected while it is mounted on the server.
You should consider wiping the drive and setting up proper network backups which will then create disk images and let you set encryption for the disk images.
PS. You might want to disable VNC access over the Internet and only make this possible via a VPN connection. You could use the VPN server function in the same server software. It is generally best practice to only make available via the Internet those protocols absolutely needed, e.g. Web for web serving, and email for a mail server. Everything else e.g. file sharing, VNC, etc. should be limited to being only accessible via a VPN connection.

Drive encryption software

We have a Windows server 2008 r2 domain and running 500 windows 7 machines. We are looking into a new drive encryption software. We currently use Novell ZenWorks Full Disk Encryption. We have had several issues with this IE blue screens when installing
the agent.
I would like to know of some other reputable options for disk encryption. It need to be centrally managed and 256 bit encryption.
Thanks
Josefah

I am sure that is not a surprising answer, have you thought about Bitlocker http://windows.microsoft.com/en-US/windows7/products/features/bitlocker
- you need Win 7 Ultimate or Enterprise
- works great with TPM (without TPM look in Win 8)
- manage it with in AD (with an Enterprise Agreement you can do MBAM)
- add some scripts (WMI) for reporting
- configure GPOs so that all recovery keys are stored centrally and make seperate backups of all recovery info in AD just in case the machine account gets deleted and recreated and you need after 2years the recovery key
My experience with 3rd parties are not good either, regardless who it was.
Hope that helps,
Lutz

Can I do a full drive encryption?

Similar Messages

Maybe you are looking for