enjay Posted July 20, 2009 Posted July 20, 2009 We will be implementing a data security policy next year to cover encryption of pen drives. I am happy for what I'll implement for Windows users (either TrueCrypt or Cryptainer), but I would like to have a product which staff can use which will be compatible with both the Windows PCs (RM CC3) in school and their Macs at home. Does such a thing exist?
teddybear Posted July 20, 2009 Posted July 20, 2009 Can't for the life of me remember the make/model of the pen drives we had for the Macs here but they needed an admin account to install some software before they would work. That's fine I suppose it the user can bring in their laptop etc, but if they are to use the pen drive on loads of different macs it might be fun to get the software installed on all of them.
enjay Posted July 20, 2009 Author Posted July 20, 2009 @Teddybear - that shouldn't be a problem; we only have PCs in school, so the only Macs they would have to install the software on are their home ones, to which they presumably have admin rights. Can you find out which pens you bought or not?
IrritableTech Posted July 20, 2009 Posted July 20, 2009 Truecrypt has a MAC version (and linux). Once installed USB pens in traveller mode work like a treat and all three platforms.
enjay Posted July 20, 2009 Author Posted July 20, 2009 TrueCrypt Traveller mode requires the user to have admin rights on the PC, doesn't it? That wouldn't be appropriate here, as our staff are not local administrators.
IrritableTech Posted July 20, 2009 Posted July 20, 2009 TrueCrypt Traveller mode requires the user to have admin rights on the PC, doesn't it? Not if the software is already installed on the machines it doesn't. Roguespears MSI is very handy for deploying it. Just be aware that I think the latest RS version is 6.1. Truecrypt containers made in 6.2+ will not open with it. To get round this you can also deploy a 6.2 truecrypt.sys after using the RS MSI. Everything then work happily. We have deployed truecrypt to all machines. Staff are advised to install truecrypt if they are using macs or linux at home. Staff using windows shouldn't need to install if they are admins at home.
teddybear Posted July 20, 2009 Posted July 20, 2009 @Teddybear - that shouldn't be a problem; we only have PCs in school, so the only Macs they would have to install the software on are their home ones, to which they presumably have admin rights. Can you find out which pens you bought or not? It's the security team that's currently looking in to them. They've been in touch with loads of suppliers and haven't found a suitable one. We haven't bought any specifically for the Mac yet, I'll try to find out which ones they have had in.
IrritableTech Posted July 20, 2009 Posted July 20, 2009 Just be aware that a number of companies sell usb sticks as protected, secure or some other loose term. Most are not encrypted, and are simply password protected hidden partitions. These can be viewed in seconds with partition software and the like.
TechMonkey Posted July 20, 2009 Posted July 20, 2009 We are looking at this over the summer as well. How do other staff cope with Truecrypt, our worry is that it will be slightly too involved, mounting drives & the like, so they will end up ignoring it. Does traveller mode resolve this? Or is it just a case of beating it into the staff until they follow?
IrritableTech Posted July 20, 2009 Posted July 20, 2009 We too are just implementing it this summer. Traveller mode is pretty straight forward. Plug the pen in, a password prompt comes up, pop in password, hit return, encrypted file system pops up (always the same drive letter). Right (or left) click on truecrypt icon and press dismount all. Roberts your fathers brother. I expect there will be teething issues, but we are creating some guides and will be taking the staff through the procedure when we get them to set their password. 200 pens are being manufactured with our truecrypt installation as we speak so it had better work!
Chillibear Posted July 20, 2009 Posted July 20, 2009 The Ironkey drives work on PC and Mac without any trouble, but they are fairly expensive compared with an off the shelf stick and truecrypt.
TechMonkey Posted July 21, 2009 Posted July 21, 2009 Last time I looked the IRONKEY sticks work as standard but the encryption features don't. They are looking at making a mac version but it is coming soon.
Chillibear Posted July 21, 2009 Posted July 21, 2009 Last time I looked the IRONKEY sticks work as standard but the encryption features don't. They are looking at making a mac version but it is coming soon. Both of mine seems to work okay swapping between OSX and XP (SP2+), I've never tried under Linux. I can't be sure the data is really encrypted and not just hidden I suppose, certainly the encrypted partition needs unlocking using the mac unlocking app before use, in much the same way it works under XP. Their support site seems to indicate all is well across the major three OSs now (https://support.ironkey.com/article/50150000000Dx1iAAC)
enjay Posted March 2, 2010 Author Posted March 2, 2010 Roguespears MSI is very handy for deploying it. Just be aware that I think the latest RS version is 6.1. Truecrypt containers made in 6.2+ will not open with it. To get round this you can also deploy a 6.2 truecrypt.sys after using the RS MSI. Everything then work happily. So, to check I've got this right... If I installed that RogueSpears 6.1 MSI with an updated truecrypt.sys file, then Windows and Mac users, even restricted Windows users such as our staff in school, would be able to use Truecrypt Container. Yes?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now