Question about encryption

[sidewinder]

Dont worry, this isnt a post asking which software, I have done a search

But it seems TrueCrypt is widely used and recommended.
However it seems that there is no built in recovery if teachers forget the password/encryption key

Personally, I dont see a massive problem with this - it is their own fault, and anyway, surely sensitive data on USB sticks will only be a copy of something on the internal network?

But the NM wants something where you can recover data. I assume thats onyl available in pretty expensive enterprise level software?

[plexer]

If you use whole disk encryption with truecrypt you create a bootable iso which can be used to recover the machine if the password is forgotten.

Ben

[pooley]

We use Truecrypt here for USB and are about to start implementing it for all laptops.

When encrypting the laptops you can create a recovery cd, as for USB, I make a note of the staff password and lock that document in the school safe.

[plexer]

The whole point of using encryption is so that without a valid key the data can't be recovered otherwise it would be useless.

Truecrypt is enterprise level software.

Ben

[LeMarchand]

Maybe I'm being dense, but surely if it was possible for anyone with the right software to recover the encrypted data it would be a pointless exercise encrypting it in the first place?

Unless you want a "master" password type arrangement, in which case .

P.S. Would it be worth assigning passwords and keeping an (encrypted) list?

There were no answers when I started typing.

[plexer]

You type too slow dear friend

Ben

[Gerry]

We use this: CE-Infosys You can customise the start screen with your own image, and it uses a master password for the forgetful.
We're getting hardware-based encrypted flash drives for staff. Probably one of these: Kingston Technology Company - Flash Memory - DataTraveler For Enterprise

[sidewinder]

as for USB, I make a note of the staff password and lock that document in the school safe.

so you assign a set password for everyone or one for each staff member?

only currently looking at USB sticks, not laptops

[plexer]

Truecrypt has the option to backup the volume header infomation.

I'm not sure if this would allow you to encrypt the usb with a password known by you, backup header, allow user to pick new password.

Then if they forgot the password, restore backup header, unencrypt using your password?

Ben

[plexer]

Ok just tested this and that does appear to work.

So as long as you have a backup of the header for each stick you'd be able to recover the data at a later date.

Ben