Truecrypt Container Mode

[elsiegee40]

I need to encrypt a set of memory sticks so that they can be used on PCs both inside and outside school... without installing softare on the machines in question (likely to be both XP and Vista)

 

I believe Truecrypt will do the job with and from what I can see I need to do this in 'container mode'.

 

I'm trying get my head round exactly how I do this and am struggling to find it in the help section on the Truecrypt website. Can anyone help me please?

 

Idiot's guide needed for Idiot whose brain sems to have gone a go-slow... sorry!

 

EDIT

 

I think what I'm asking is do I install it on a PC first and then use this to do something on the memory stick or do I have to install it on the memory stick?

Edited November 14, 2008 by elsiegee40

[vote-for-pedro]

I use Cryptainer LE

 

 

Install it on a machine setup your usb sticks with it then unistall it from the machine so it runs from the memory stick. secure folders are only 20-25mb max but thats fine for a few sensitive documents

[mac_shinobi]

from the faq on truecrypt :

 

Q: How can I use TrueCrypt on a USB flash drive? A: You have two options:

 

1. Encrypt the entire USB flash drive. However, you will not be able run TrueCrypt from the USB flash drive.
   Note: Windows does not support multiple partitions on USB flash drives.
   
2. Create a TrueCrypt file container on the USB flash drive (for information on how to do so, see the chapter Beginner's Tutorial, in the TrueCrypt User Guide). If you leave enough space on the USB flash drive (choose an appropriate size for the TrueCrypt container), you will also be able to store TrueCrypt on the USB flash drive (along with the container – not in the container) and you will be able to run TrueCrypt from the USB flash drive (see also the chapter Traveler Mode in the TrueCrypt User Guide).
   

TrueCrypt - Free Open-Source On-The-Fly Disk Encryption Software for Windows Vista/XP, Mac OS X and Linux - FAQ

[elsiegee40]

Thanks mac_shinobi. The traveller mode bit is what I need, I think.

 

The problem I can now see isthe bit about needing administrative privileges in order to run it in this way... which means the sticks should work at the teachers homes, but won't work at school as the teachers don't have administrative rights

 

I have a feeling that this may be a non-starter unless people know how to get round this?

[sparkeh]

Thanks mac_shinobi. The traveller mode bit is what I need, I think.

 

The problem I can now see isthe bit about needing administrative privileges in order to run it in this way... which means the sticks should work at the teachers homes, but won't work at school as the teachers don't have administrative rights

 

True...I am currently looking into this and think I am going to put the software on all the school machines.

[elsiegee40]

I use Cryptainer LE

 

 

Install it on a machine setup your usb sticks with it then unistall it from the machine so it runs from the memory stick. secure folders are only 20-25mb max but thats fine for a few sensitive documents

 

Does this have an admin rights requirement for users?

[CyberNerd]

Becta released some detailed documentation for teachers

http://schools.becta.org.uk/upload-dir/downloads/data_encryption.odt

[mac_shinobi]

isnt there a truecrypt portable on PortableApps.com - Portable software for USB drives or something like that ?

 

The Portable Freeware Collection - TrueCrypt

 

also did find this which you can use with truecrypt

 

CodeProject: TCExplorer - Portable software to import, export, delete, rename, view, edit and execute files in TrueCrypt containers. Free source code and programming help

[Jobos]

Thanks mac_shinobi. The traveller mode bit is what I need, I think.

 

The problem I can now see isthe bit about needing administrative privileges in order to run it in this way... which means the sticks should work at the teachers homes, but won't work at school as the teachers don't have administrative rights

 

I have a feeling that this may be a non-starter unless people know how to get round this?

 

Has the problem of Truecrypt traveller mode needing admin rights been resolved? Is there a better way of running Truecrypt for staff at school?

[Jobos]

Anyone?

[plexer]

You can get around the requirement for administreator privelleges if you install truecrypt as admin first so that the required driver can be installed

 

TrueCrypt - Free Open-Source On-The-Fly Disk Encryption Software for Windows Vista/XP, Mac OS X and Linux - Documentation

 

Ben

[Jobos]

Is there an .msi for installing truecrypt over the network?

[enjay]

I use Cryptainer LE

 

Looks promising - has anyone actually tried using this within their school?

[contink]

Is there an .msi for installing truecrypt over the network?

 

Late in the day but dealing with this myself now...

RogueSpear's Forums • View topic - TrueCrypt V6.2a

 

MSI available above but you'll need to register to download

[burgemaster]

You can get around the requirement for administreator privelleges if you install truecrypt as admin first so that the required driver can be installed

 

TrueCrypt - Free Open-Source On-The-Fly Disk Encryption Software for Windows Vista/XP, Mac OS X and Linux - Documentation

 

Ben

 

I created an tiny MSI that simply installed the drivers alone.

Then when setting up all memory sticks, make sure that Traveller mode is selected

[enjay]

I created an tiny MSI that simply installed the drivers alone.

Then when setting up all memory sticks, make sure that Traveller mode is selected

 

What rights do people need to run that? I know that some of the portable ones require local admin rights...

[burgemaster]

What rights do people need to run that? I know that some of the portable ones require local admin rights...

 

they dont need any as the drivers are allready installed.

In the documentation it says that you need admin rights to use traveller mode, but once the drivers are installed once on the machine then any restricted user can use it.

 

I think the only thing we had to do was add an "File Screening" exception for the exe on our on our Nas storage server.

[enjay]

So your MSI puts the drivers on the school's PCs, and they can then use the drives. Yes? I'm assuming you installed it onto then pen drives for them, by the way?

[contink]

Any chance of that driver only MSI?

[pwds]

Note of caution that pulling out a memory stick without properly ejecting it will trash the entire drive with TrueCrypt, or at least did in our tests.

 

Be prepared for a LOT of pain of lost documents should that still be the case.

 

May no longer be an issue but please test before rolling out.

[box_l]

check Arthurs post here http://www.edugeek.net/forums/scripts/30327-arrrrggghh-vbs-quotes-2.html

 

he had the solution for me, and i am still using it in many schools.

 

I think it will be just what you want.

 

bOx

[enjay]

they dont need any as the drivers are allready installed.

In the documentation it says that you need admin rights to use traveller mode, but once the drivers are installed once on the machine then any restricted user can use it.

 

I think the only thing we had to do was add an "File Screening" exception for the exe on our on our Nas storage server.

 

@burgemaster - would you be willing to share that MSI?

[burgemaster]

hi,

 

Yes sure, I will remake it as its using the older version of truecrypt and has mentions of you school in the installer etc,

 

Will post a link when I have a second,

 

And yes we do set up the mem stick for them, doesnt take long.

Have not seen any lose files yet but I can see why that would happen!!

 

Cheers

Tim

[Arthur]

Any chance of that driver only MSI?

I hope Burgemaster doesn't mind, but I have attached a copy of the MSI I created recently. It has been updated to v6.3a and includes an MST which will install just the driver. The "Save Transformed" option in Orca/InstEd can be used to create a driver only MSI if required.

 

N.B. I have only tested it on XP so far, but it should also work on 32-bit editions of Vista & Windows 7. Once I get a bit of spare time, I'll test it properly on those OSs and perhaps create a 64-bit package too.

TrueCrypt v6.3a.7z

TrueCrypt v6.3a - CC3 Extras.7z

Edited March 2, 2010 by Arthur

[enjay]

@Arthur - so I would use the same MSI and just apply the relevant MST/package.ini file, yeah? That's cool. I'll give that a spin.

 

Am I right in thinking that if someone forgets their TrueCrypt password or dismounts the drive incorrectly, they permanently lose all the data?