<div dir="ltr">My experience with Bitlocker is that it seems to Just Work™, and upgrading to the right edition of Windows (if you have to do that) may be less money than using some third party thing.<div><br></div><div>You should probably enable TPM & PIN to unlock the drive, though, since it's more likely that the entire machine will be stolen than just the drive.<br><div><br></div><div><a href="http://mikebeach.org/2011/12/08/how-to-enable-bitlocker-tpmpin-after-encrypting-hard-drive/">http://mikebeach.org/2011/12/08/how-to-enable-bitlocker-tpmpin-after-encrypting-hard-drive/</a><br></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jan 23, 2015 at 3:18 PM, John P. Rouillard <span dir="ltr"><<a href="mailto:rouilj@cs.umb.edu" target="_blank">rouilj@cs.umb.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
Hi Everybody:<br>
<br>
I am looking for a full disk encryption solution for a standalone<br>
windows 8 netbook system (not sure if it's starter, home, pro<br>
etc. edition though). There is no other windows boxes in the mix,<br>
certainly no windows servers/AD etc.<br>
<br>
Usually I would go to truecrypt (which runs on my netbook quite<br>
nicely). The person I am doing this for has HIPPA protected data that<br>
he wants to secure. Also he may be moving soon away from here so I<br>
won't be able to support him. He uses computers but doesn't really<br>
tinker with them (i.e. a computer is a tool to do real work). Also I<br>
think having a commercial solution would make it easier to support the<br>
claim of due diligence if it comes to that.<br>
<br>
I was looking at Symantec Endpoint Protection ($116 for 3 year support<br>
<a href="http://buy.symantec.com/estore/clp/productdetails/pk/endpoint-encryption" target="_blank">http://buy.symantec.com/estore/clp/productdetails/pk/endpoint-encryption</a>).<br>
<br>
However reading the manual linked off the page makes it looks like it<br>
needs a server etc. to make client packages and manage the<br>
install. Calling symantec was worthless as the lady on the other end<br>
of the phone said I had to buy it before she could talk to me. So<br>
totallly useless.<br>
<br>
Why would I buy it if it wasn't going to match the use case?<br>
<br>
For the right version of windows, bitlocker may be an option but I<br>
don't have any experience with it, but upgrading to pro windows<br>
(assuming it will run on the netbook) may be a cheaper option than an<br>
FDE purchase if it can encrypt the drive in place.<br>
<br>
So what other sources of standalone FDE are out there for windows? I<br>
was looking into symantec because it was what Bruce Schneier<br>
(supposedly) went back to after truecrypt's demise, but I am less<br>
thrilled with it after dealing with the "support folks", but hey at<br>
least she spoke english without a very heavy accent.<br>
<br>
Quips, comments, suggestions, evasions and answers welcome.<br>
<br>
--<br>
-- rouilj<br>
John Rouillard<br>
===========================================================================<br>
My employers don't acknowledge my existence much less my opinions.<br>
<br>
_______________________________________________<br>
bblisa mailing list<br>
<a href="mailto:bblisa@bblisa.org">bblisa@bblisa.org</a><br>
<a href="http://www.bblisa.org/mailman/listinfo/bblisa" target="_blank">http://www.bblisa.org/mailman/listinfo/bblisa</a><br>
</blockquote></div><br></div>