How To, When You Have To Encrypt Absolutely Everything?

Dark Neuron writes "My institution has thousands of computers, and is looking at starting an IT policy to encrypt everything, all hard drives, including desktops, laptops, external hard drives, USB flash drives, etc. I am looking at an open source product for Windows, Mac, UNIX, as well as portable hard drives, but I am concerned about overhead and speed penalties. Does anyone have experience and/or advice with encrypting every single device in a similar situation?"

Comments

Have fun with management

[jgtg32a]

Maybe its just the corporate environment that I'm in and please I would love to be wrong. But from what I can tell a good number of open sourced products just don't scale up to the enterprise level.

There aren't any tools that manage them centrally and allow for compliance and auditing.

Re:TrueCrypt or Wait for On Drive Upgrades

[duffbeer703]

TrueCrypt in an enterprise? Hahaha!

What happens when somebody loses their password or keyfile? Or you get an subpoena for a laptop or usb key's content?

Unfortunately, no open source solution exists. Look at vendors like PGP, McAfee, Pointsec, etc. The outrageous cost is offensive, but you need to pay to pay in an enterprise environment right now.