How do you encrypt school data (and offer secure file deletion) ?

[revilloc]

Having a read of the BECTA guidelines for data encryption as we are looking at moving towards a solution at our school.

Looking for guidance or recommendations as to products that people are using for encrypting data ( on laptops / servers / back-up tapes etc and USB sticks ) - also how do you manage this / train staff ?

The guidelines also mention using secure file deletion for files that contain personal data - similar question - what do you use ? how do you train staff ??

Any users of TrueCrypt for encryption or Eraser for file deletion ? (seeing they are open source )

Thanks

[neon]

Looked at true crypt but it is something teachers dont have time to learn or care about, we have just invested in 4gb 256 aes encrypted memory sticks and these are brilliant. No training needed as it is straight forward plug it in ask for password, put it in off you go, however if you get it wrong 6 times deletes everything :S

Integral Crypto 4GB USB Key - Misco.co.uk

Have given one to all teachers and made them copy all other memory sticks and take them out of action...
Not sure about the secrure delete, spose when its on the computer the user will need a password to gain entry so it is protected in a way?

Could you post the link to becta recommendations with regard to encryption?

[revilloc]

Thanks for your reply.

link : http://schools.becta.org.uk/upload-d...encryption.pdf
page : Becta Schools - Leadership and management - Security - Data handling security guidance for schools

secure delete is the process of actually 'securely' deleting a file rather than relying on Widows, for example, which actually does not 'really' delete files from the hard-drive and hence deleted files can be recovered...

[ind1ekid]

I believe Server 2008 R2 has certain features integrated into active directory tied alongside BitLocker to managed users encrypted devices.So you can retrieve lost encryption keys and such for a specific user. I thinks thats that the crack was with it.

BitLocker Active Directory Recovery Password Viewer Overview