Recommended drive encryption solution

Posted by Chris Driver on Server Fault See other posts from Server Fault or by Chris Driver
Published on 2010-01-19T12:28:44Z Indexed on 2010/05/19 13:32 UTC
Read the original article Hit count: 233

Hello, I will soon be purchasing a number of laptops running Windows 7 for our mobile staff. Due to the nature of our business I will need drive encryption. Windows BitLocker seems the obvious choice, but it looks like I need to purchase either Windows 7 Enterprise or Ultimate editions to get it. Can anyone offer suggestions on the best course of action:

a) Use BitLocker, bite the bullet and pay to upgrade to Enterprise/Ultimate

b) Pay for another 3rd party drive encryption product that is cheaper (suggestions appreciated)

c) Use a free drive encryption product such as TrueCrypt

Ideally I am also interested in 'real world' experience from people who are using drive encryption software and any pitfalls to look out for.

Many thanks in advance...

UPDATE

Decided to go with TrueCrypt for the following reasons:

a) The product has a good track record

b) I am not managing a large quantity of laptops so integration with Active Directory, Management consoles etc is not a huge benefit

c) Although eks did make a good point about Evil Maid (EM) attacks, our data is not that desirable to consider it a major factor

d) The cost (free) is a big plus but not the primary motivator

The next problem I face is imaging (Acronis/Ghost/..) encrypted drives will not work unless I perform sector-by-sector imaging. That means an 80Gb encrypted partition creates an 80Gb image file :(

© Server Fault or respective owner

Related posts about disk-encryption

Related posts about bitlocker