PGP Whole disk Encryption but for Windows Partition only ?

Hi,
Slightly unusual situation here. I want to use my MacBook Pro at work and home. OSX at home and XP at work. Now at work they have a strict policy of only allowing computers on the network with PGP Whole disk Encryption. I've looked into this and there doesn't appear to be a way of setting this up via bootcamp because PGP makes use of MBR which as far as I know bootcamp doesn't use and PGP themselves say bootcamp isn't supported.
Looking around the web there are various articles about tripple/quad booting Mac systems not using bootcamp but things such as Grub or reFIT. I'm wondering if there is a way of using this boot technique but using the partition option when installing PGP for windows and only setting it up on the defined windows partition.
Has anybody tried this or have alternatives ?
Thanks in advance
Steve

Hi Steve:
Windows has a boot manager built in. Windows can be installed on a logical NTFS partition, the boot
manager can sit on a tiny fat or fat32 primary partition. I have used this arrangement on my PC's
many times. I have not tried it on a Mac, but it should work. You will need to have some working
knowledge of partitioning to pull it off.
I don't know how PGP designed their software, but it should support this arrangement, unless they
have some cheesy engineering design built into their software that would prevent it from working.
The windows boot manager has been with NT from the beginning. It is not rocket science, NTLDR
sits in the usual spot reserved for system boot files, the boot ini file tells NTLDR what partition
the /windows/system32/ntoskrnl.exe is on and NTLDR passes the ball to ntoskrnl and away
she goes if everything is Kosher. Windows boot manager can boot other OS's as well.
Be aware though that windows may assign a drive letter to the windows installation other than
"c" (usually "d" of "f". That doesn't keep anything from working though.
Kj

Similar Messages

  • PGP Whole Disk Encryption

    After my wife's iphone was stolen I was thinking of installing PGP whole disk encryption on my Macbook pro. PGP does not support Boot camp. Is there a way for me to take my install of Windows XP and transfer that to parrells? In other words take the entire partition and copy it into the Virtual Machine on Parrells or Fusion? Also how should I copy the windows partion, if I was going to do this sort of thing on the mac I'd use super super or carbon copy cloner to copy the entire disk over to another disk.
    thanks,
    jeff

    jevenson:
    I need to understand this post clearly. Just so you and I are on the same page, I am going to make some assumptions. You plan to install PGP Whole Disk Encryption on your OSx side. I suspect that you want it to cover your boot camp partition upon which Windows XP resides.
    PGP does not support Boot camp.
    I am assuming that by this you meant that should you install PGP on the OSx side then it would not cover the Windows side on a boot camp setup.
    Is there a way for me to take my install of Windows XP and transfer that to parrells? In other words take the entire partition and copy it into the Virtual Machine on Parrells or Fusion?
    No, at present, I do not know of any way to actually move Windows from a boot camp partition to reside on the OSx partition and run as a virtual machine under parallels or fusion without performing a complete installation under parallels/fusion.
    Now, having said that, there is another option for you. Parallels and Fusion both can use the boot camp partition with Windows as a virtual machine BUT without moving windows on the OSx partition. It will run WIndows as a virtual machine directly from the BC partition. So, you will be able to run OSx and Windows at the same time. What I am not sure is that if you have PGP installed on the OSx side and since parallels/fusion runs from the OSx side then will it encrypt the boot camp/windows when run under it?
    Axel F.

  • PGP whole disk encryption and Snow Leopard

    I've got Leopard with PGP whole disk encryption on it but am having difficulties in installing SL as it want to wipe the HD.

    Hi Thomas
    Sorry I was trying to save this as a post rather than a question but it hasn't seemed to save my edited message for some reason.
    PGP for me is better in that it encrypts the whole disk rather than just the user account. Using FileValut is really unfriendly with TimeMachine, it slows the computer down and for a lot of people you can't actually activate it if you don't have enough space remaining on your HD.
    PGP will encrypt your whole disk without slowing it down or taking up any additional space. It also works better than a firmware password that can be bypassed by resetting the PRAM.
    The problem with PGP is that in trying to install Snow Leopard the installer doesn't recognise the boot partition even once the encryption has been removed. This causes it to prompt the user to wipe the HD. Here's the solution I found after some pain I might add:
    Remove all the encryption from your HD and Time Machine.
    Back up!
    Start the Terminal from the Leopard Installer (Utilities->Terminal). This has to be done from the installation disk.
    Type diskutil list
    Identify your system disk. In most cases it is disk0s2
    There's a volume called "Boot OSX" on the next partition, probably disk0s3. If your system is different than disk0, then use that identifier in place of disk0 for the rest of these instructions.
    Type diskutil unmountdisk disk0
    Type gpt remove -i n disk0 where the n is the last number of the boot partition; for example, disk0s3 would be 3; you would type gpt remove -i 3 disk0
    Exit Terminal
    P.S. if you accidentally remove the wrong partition OSX wont start up but don't worry, run disk utility from the installation disk and create a new partition and restart. All your data will still be there!

  • Not all free disk space available for windows partition in Boot Camp

    Hi,
    I want to install Windows 7 via Bootcamp on my MacBook (2009, Mavericks OS, BootCamp Assistant 5.1.2) and unfortunately it has been a huge struggle until now to achieve that. The whole reason for this is that I had Windows XP as the second OS on my MacBook, but I wanted to increase the Windows partition with Disk Utility. Unfortunately this permanently damaged my Windows partition so I couldn't use it anymore.
    What I did next? I decided to delete the old Windows XP (which isn't supported anymore by Mavericks) with Disk Utility, which afterwards tells me that I have 1 partition left: The Mac partition.
    From there on I wanted to install Windows 7 with the newer Boot Camp. The problem is that in fact Finder tells me that my Macintosh HD has 58,54 Gb free space, so I would like to assign at lease 30 Gb to the to-be Windows partition. However, Boot Camp only gives me the option to assign 20 until 24 Gb, other values I can't assign.
    Can anyonetell me why this happens or what could be the problem? I need to have more than 24 Gb available for my Windows as this was the whole reason why I once wanted to increase my old Windows partition, that's where all the problems came from.
    I appreciate your help, thank you!
    Here is what Disk Utility tells about my partitions:

    TTBOMK the only way you can increase the Windows partition is to repartition the drive back to a single partition
    Then reinstall Mountain Lion
    Restore all data from backup
    Create new larger partition with Boot Camp
    Install Windows
    Restore data from backup
    Allan

  • Used 60 GB for Windows partition (BOOTCAMP) had less than 25GB free after instalation

    Installed windows on bootcamp on my 2012 Retina MacBook Pro (256 SSD). I used 60 GB for Windows partition (BOOTCAMP) had only about 25 GB free after instalation. Why?
    If I look at the size of all the folders inside BOOTCAMP it adds up to 17 GB. Where did almost 20 GB go?
    I'd truly appreciate any help with this.
    Thank you,
    Matej

    Look for two files.  pagefile.sys and hibernation.sys...these are used as swap space and ram sleep image respectively.  You can limit the first as suggested and turn the later off.

  • Whole Disk Encryption

    I have a T510, Windows 7, 64-bit.  I recently used PGP Desktop 10.1.1 to encrypt the "C:\" partition only using the Windows P/W (in a domain).  After rebooting the PGP login page appeared as expected, accepted the login and would not start the O/S.  Re-imaging the HDD from backup failed to recover the system.  Those of you that are using PGP Desktop could you please share with me the steps/best-practice you are taking to encrypt the HDD?
    Also,  Do you still have to decrypt the HDD before performing backup/image of the HDD to be able to recover?
    Thanks,

    It's complicated   That vulnerability (which affects a number of encryption technologies) depends on the key being in memory which is used in many cases to prevent the user from having to enter two separate logins when they wake from sleep.  It is possible to configure FileVault in such a way that it's not an issue, but it's less convenient to use.
    FileVault has a setting, destroyfvkeyonstandby, which can alleviate this, but be aware that security is ALWAYS a tradoff between "ultimate security" and usability.  In this case, I think the default case is reasonable and the exploit mentioned has too many requirements to be a real concern.
    To see all the details on FileVault 2, you can open a terminal window and type 'man fdesetup" and among it is this information on the FileVault key, etc:
      On supported hardware, fdesetup allows restart of a FileVault-enabled
         system without requiring unlock during the subsequent boot using the
         authrestart command. WARNING: FileVault protections are reduced during
         authenticated restarts. In particular, fdesetup deliberately stores at
         least one additional copy of a permanent FDE (full disk encryption)
         unlock key in both system memory and (on supported systems) the System
         Management Controller (SMC).  fdesetup must be run as root and itself
         prompts for a password to unlock the FileVault root volume.  Use pmset
         destroyfvkeyonstandby to prevent saving the key across standby modes.
         Once authrestart is authenticated, it launches reboot(8) and, upon suc-
         cessful unlock, the unlock key will be removed.  You can also use this as
         an option to the enable command if the system supports this feature.  The
         supportsauthrestart command will check the system to see if it supports
         this option.

  • Whole disk encryption with boot camp?

    I'm a network administrator and have been dedicated Windows until now.  We are just about to receive our first Mac Air 13" in the office and trying to work out we can keep our security policy in tact whilst giving the flexibility of using Windows.
    Pretty sure we want to do boot camp so the user can decide which OS they want to go into and not have any performance issues.
    Do you know of any products that will encrypt the entire hard disk this without giving booting issues?
    Alternatively, if these products break booting they would have to log in to the Mac OS and then run a virtual machine (think it's called parrallels).  Is there a noticable performance hit on this?
    Thanks in advance - this is very new territoty for a long term windows fan boy
    Adam

    The encryption is dependant on the OS version. To my knowledge there is no way to Encrypt the Whole Drive with any one piece of software and then install both OS X and Windows on that drive. For the encryption to work it has to work with the OS installed. So you have OS X and then use Boot Camp to install Windows. Then use FileVault in OS X and whatever encryption system you want for the Windows partition/install.
    I could be complete mistaken.

  • Mac disk accidently formatted for windows...

    I pulled a mac hard disk from a friends broken Powerbook G4 - formatted with OS 10.x - with the intention of pulling all the info off the drive so my friend could save his files.  After putting the drive in a USB2 enclosure, I could see the files fine, and was about to transfer them to my HD, when my braniac son who builds PCs for fun asked what I was doing.  I expalined that my friend had purchased a windows PC and would not likely be able to view the files on his PC, so I was going to transfer them to my machine, reformat the disk to work with windows, and transfer the files back. Maybe there was an easier way, but I am not aware what it would be. 
    My son said "no problem dad- windows can read that disk".  BEing the eternal pessimist, I said "OK, show me".  He plugged the disk into his machine and viola- nothing happened.  He was surprised, and started typing furiously- and before I could ask what he was doing I guess he put a windows partition on the drive with windows 7 drivers -  I think it is NTSF. But he still could not see the files.
    I stopped him ASAP, and took the disk back to my Mac.  I opened disk utility, and I saw 2 partitions- one 250MB with the windows format.  The other -I think- was "unformatted".   I downloaded Data Rescue 3, and scanned the disk.  That application can see the files I need, but I am thinking there has got to be another way without spending $100.  When I use Disk Utility now,  the drive shows it is "unformated".
    What I want to do is somehow mount this on my Mac, possibly rebuild a directory and offload the files.
    Thoughts?

    Have your son cough up the $100. You broke it. You fix it!
    Try:
    "TestDisk is a free data recovery utility. It was primarily designed to help recover lost data storage partitions and/or make non-booting disks bootable again when these symptoms are caused by faulty software, certain types of viruses or human error (such as accidentally erasing a partition table)."
    http://en.wikipedia.org/wiki/TestDisk
    The more you mess with the disk, the greater the chance of trashing the disk.  I'd say TestDisk is too risky.
    Mess with a virtual hd. 
    Use disk utility to create. Not shown in the example.
    I think if you rename the created file to .dmg, it will just work.
    Do a  bit-by-bit copy
    In Mac OS 10.4, you can use the following command to display all the partitions:
    Macintosh-HD -> Applications -> Utilities -> Terminal
    # This is a little deep.
    #It is  best to do the pdisk command before you eject the external hard drive. Now, eject the external hard drive.  Do another pdisk command to see what drive name has disappeared.  The disappearing name is the name of your external hard drive.
    sudo pdisk -l
    #for details...
    man pdisk
    #The syntax is different for Mac OS 10.2. I do not know about 10.3.
    # Do a  bit-by-bit copy.
    #eject the partition
    Macintosh-HD -> Applications -> Utilities -> Terminal
    dd if=/dev/disk0s10 bs=4096 | gzip | dd of=~/disk0-s10 bs=4096
    #this can take awhile. Open another window and do ls -l ~/disk0-s10
    # Here is  how to restore the partition.
    dd if=~/disk0-s10 bs=4096 | gunzip | dd of=/dev/disk0s10 bs=4096
    Remember to erase the large zero data file before backing up.
    Robert

  • Mac dies on boot, every time - but bootcamp Windows partition still runs

    Hi there,
    I hope someone can give a bit of advice.
    I have a 17" Intel iMac, Core 2 Duo, the old white style, running OSX 10.4 Tiger.
    When I got it I set up a smallish partition (80GB, the hard drive is 500GB) using the Bootcamp beta and installed Vista Home Premium on the partition. I went along for a while happily switching between the two. However, I am now completely incapable of booting into OSX.
    When the computer is turned on, the Mac chime sounds, then it thinks for a second or two, and goes straight into Vista. If I hold down Option to go into Bootcamp and choose which OS to run, it will let me. However if I choose the Mac partition, the computer thinks for a sec, then switches itself off.
    I've tried launching in safe mode. This doesn't work, the computer just boots into Vista.
    I've tried inserting the Tiger install disk to run Disk Utility (holding C when you turn on), but the same thing happens - it boots in Vista.
    I've tried launching in single user mode, but the same thing happens.
    I've tried running Disk Warrior, but can't.
    I've tried Cmd/Opt/Shift/Del to force it to run from the CD, but it just turns off.
    Basically, I have the install disks for OSX and Vista, and I have everything backed up on an external HD, so I want to do a complete fresh install of OSX and start again - I might purchase Leopard and use its version of Bootcamp (because it's not beta, and would hopefully be more secure from this kind of thing).
    Is there anything else I can do to make this thing run Disk Utility? I don't want to pay repair costs if I can somehow avoid it.
    Thank you very much.

    But there can't be much wrong with the HD if the Windows partition runs fine.
    Sort of, sort of not, depending how you look at things... one bit going astray in the wrong place can cause anything to happen.
    Does it boot into Open Firmware with CMDOption+of ?
    http://docs.info.apple.com/article.html?artnum=42642
    reset-nvram (press Enter)
    set-defaults (press Enter)
    reset-all (press Enter)
    Have you done a PRAM reset...
    http://docs.info.apple.com/article.html?artnum=2238
    Intel-based iMac, Intel-based Mac mini: How to reset the System Management Controller ...
    http://support.apple.com/kb/HT1543
    Startup key combinations for Intel-based Macs...
    http://support.apple.com/kb/HT1533

  • My 100 gb partition for windows is only showing up as 28 gb???

    Basically i partitioned my macbook twice. The first time, i assumed 28 gb would be enough... and it wasn't. So i followed the instructions on Bootcamp help for creating a larger partition. I partitioned off over 100 gb the second time. This memory amount showed up when i booted up windows for the first time but when i restored windows from the disc image that i made before deleting the first partition it went back to 28 gb. When i opened up disc utitlities, it said i have over 100 gb on the windows partition. Windows just doesn't see it... help!

    Thank u verrrrrrrrrrry much FoxFifth u save my life thank u.

  • How do i recover disk space after deleting windows partition?

    I have a macbook pro running on maverick. I removed the windows partition using bootcamp assistant, but I did not gain the disk space back. The disk space is 500gb but it's still showing 250gb?

    Yes, that matters. So your partition map looks something like this:
    You see one single space surrounded in blue with the disk name in the center, sort of like the above. But, you say that this space is only 250 GBs of your 500 GB drive. In other words the space in the Size field reads 250 GBs, mol? Am I correct in my understanding?
    I suggest you might give this a try: repair the hard drive using Disk Utility. Then restart the computer. See if that recovers the space. It would also help if you could send me a screen image like mine but of your Disk Utility display on the same settings.

  • Safari for windows printing only blank pages

    Safari for Windows 5.1.1 will only print blank pages from my PC. Every other app prints perfectly to my networked printer and the printer shows up in Safari, but nothing on the paper. Any help??

    Never was able to fix it, Juan. Safari just would not print on my Windows computer.
    But I finally found another solution. I've switched from Windows computers to Macs and now I have none of those compatibility issues. I do have a few others from time to time, but no more Windows issues.
    Buena suerte amigo

  • I-tunes for windows, playlists only play one song

    I've got a bunch of playlists and for some of them they work fine. But for some when I double click to play a song, it only plays that song. It never advances to the next song.
    Thanks for the help,
    Peter

    Do all the songs have checkmarks next to them?

  • Share disks over WAN for Windows

    I spent a lot of time searching through the forum to find the solution for my problem but I could not seem to find the concrete solution for it. Hence, I'm asking for help.
    Problem description:
    I can't access my USB drives connected to the Airport Extreme over the WAN from Windows XP. However, it's working fine with my Mac.
    My Configuration:
    + Airport Extreme firmware version 7.2
    + 3 USB drives connected to the Airport Extreme via the USB hub
    Using the AirPort Utility, I have configured the followings.
    + On the Airport/Base Station tab, I have enabled "Allow configuration over Ethernet WAN port" and "Advertise configuration globally using Bonjour"
    + On the Disks/File Sharing tab, I have enabled "Enable file sharing" with accounts options (and I have created different user accounts). I also enabled "Share disks over Ethernet WAN port" and "Advertise disks globally using Bonjour"
    + On the Advanced/Bonjour tab, I have enabled "Use a wide-area hostname"
    + I also registered my dynamic IP address at home with DynDNS
    My Observations:
    + At home (this means locally), I can access all the drives from all of my machines including, Windows XP, Windows Vista, Mac Mini, PowerBook.
    + Outside of home (this means over the (WAN), either at work or at my friend's house, I still can access all the drives from my PowerBook. However, I CANNOT access any of the drives from any Windows machines.
    My Understanding:
    + On Mac, it uses AFP protocol for file sharing and this is working fine locally or over the WAN.
    + On PC, it uses CIFS protocol for file sharing and Airport Extreme seems to have issue with this over the WAN.
    Help!!!
    If anyone has found a working solution and has tried it yourself and you know it works, please post the solution with detail steps. Your help will be highly appriciated. I'm pretty sure that I'm not the only one who has this issue.
    Thanks

    Ahansen,
    I don't think this issue has anything to do with static IP address. For most of us in the US, although we have the dynamic IP address from our ISP (I have Comcast in my case), if the modem/router is always on 24/7, the IP address does not get renewed.
    Again, although, I have the dynamic IP address, I have the same IP address for many months. I have been using the same IP address to remote desktop back to my server at home when I'm away from home.
    I don't see how the static IP address is revelant here in this case unless I'm missing something.
    If it works for you, everyone will appreciate you very much if you can post the detail instruction here.

  • Reinstalling OS X but keeping Windows partition?

    I know I have seen this question around before, but can't seem to come up with a decent answer... I am going to reinstall OS X on my MacBook Pro for a variety of reasons, but am afraid of the losing my 20GB Windows XP partition. Is it possible to keep the partition during this process?
    Thanks!

    Is it possible to keep the partition during this process?
    Yes. Just reinstall Mac OS X normally. Other partitions won't be affected unless manually erased.
    (48917)

Maybe you are looking for

  • Final Cut Studio 2 and Network Accounts on SL

    I'm holding back from upgrading our lab to 10.6 because of this major issue. Using FCS2 on 10.5 and networked accounts works fine, no issues at all. Unfortunately the second 10.6 is on the machine FCP will not load on a networked account, works fine

  • Connecting lap top to hdtv

    I have a new HDTV with a pc input.  I tried to connect my m105-s3004 satellite to my toshiba 42hl167 tv using the pc input with a vga cable and the tv is displaying " unsupprted video signal.  Is there something extra I need to do to get my lap top t

  • Modify a group of contacts or quick change address

    Hi, Would anyone know a good program or tip on how I can modify a group of peoples work address or home address instead of individually change one at a time. Also, If I have a contact with key address details and phone numbers and another contact has

  • Hp wireless laser mini mouse. no icon

    I have a windows 7/ 64 system. I used to have a mouse icon in my task bar , now i don't. Tried down loading drivers no success. the mouse works fine, but i like the mouse in the task bar  You can wave the curser over the icon, this will tell how the

  • Calendar Time Zone

    Hello. Events in the calendar have time shown at the timezone where the server is located. How can it be changed to local time for each user? Thanks