SafeGuard ® Easy Hard disk encryption and pre boot authentication

Lap-Top Security

SafeGuard ® Easy provides hard disk encryption and pre-boot authentication for lap top and pcs

What's new in SafeGuard Easy Version 4.20

Whether a single laptop or 10,000 PCs are to be protected, SafeGuard Easy allows easy implementation and enforcement of the IT security policy. SafeGuard Easy is truly user-friendly. It operates transparently in the background, so end users don’t have to undergo any training. For security officers, IT managers, and system administrators, SafeGuard Easy offers transparent security, ease of policy implementation, and simple deployment.

In a world where laptops and desktop PCs are lost every day and hackers attack corporate secrets every hour, SafeGuard Easy is a business necessity.

SafeGuard Easy Security Benefits

Enhanced security, protection of PCs and notebooks against unauthorized access
Perfect protection of data on hard disk and removable media against unauthorized access
No additional cost for data erasing or hard disk destruction in case of sale, disposal, or return of leased devices as data is securely encrypted
Effective protection against master boot record viruses
Easy enforcement of a companywide security policy
Smooth integration in existing IT security environment, e.g. cryptographic token, TPM Chip
Secure protection in each power mode including hibernation and stand-by
Easy to deploy
Easy roll-out via network without end-user involvement
Easy administration from central console
Reduced help-desk workload through simple reset of forgotten passwords
Easy to use
Fully automated encryption in the background - no change of working behavior, no user training
Proven security solution - more than 1.5 million laptops and PCs worldwide are SafeGuard Easy protected

Key Features/Functionality

Security

Pre-boot authentication using password or eToken, optionally applicable on up to eight OS partitions
Organization specific password rules
Optional eToken authentication

Comprehensive encryption capabilities

Full or partial hard disk encryption, independent of file system (e.g. NTFS, FAT)
External media encryption (e.g. diskettes, ZIP and JAZ disks, USB memory sticks)
Sophisticated and efficient encryption algorithms AES (256 and 128 bit), IDEA (128 bit) and others
Secure key management: Enciphering key dynamically generated from the password entered and is not stored on disk

Secure hibernation

Encryption of Suspend to Disk mode (hibernation image)
Authentication after resume
Use of TPM chip for encryption key generation and authentication procedure (e.g. IBM ESS support)
Integrated Boot Manager to support multiple operating systems and/or secured/unsecured partitions on the same device.

System administration

Windows Installer (MSI) based installation
Optional central administration console
Queuing and distribution of configuration files to clients
Central collection of client settings
Remote management console for remote client management
Scripting interface for automating administrative tasks
Pre-boot event logging
Secure Wake on LAN

Ease of use

Single Sign On to the operating system
Automated encryption without user intervention
Efficient algorithms negligible performance impact
Secure and powerful challenge/response procedure to reset forgotten passwords without the need for on-line connection

System Requirements : Hardware

PC with Intel Pentium or similar
Minimum 25MB free hard disk space
Operating System
Microsoft Windows XP / 2000
Microsoft Windows 2003 Server Standard Edition
Network : all Microsoft-supported networks

Certifications

Common Criteria EAL1/EAL3
FIPS 140-2 (currently under evaluation)
Aladdin e-Token enabled

Complementary SafeGuard® products

SafeGuard® Advanced Security modules as add-ons to support other smartcards, central auditing, Multi-Desktop, SSO, PnP management, Application Specific Access Rights etc.
SafeGuard® LAN Crypt for workgroup based file/folder encryption.
SafeGuard® Easy Web Console for Challenge /Response Helpdesk, with CryptoServer 2000 Hardware Security Module.

Interoperability

SafeGuard Easy is compatible with all leading software distribution tools
- Extended Systems OneBridge
- Xcellenet : Afaria
- IntelliSync Systems Management
- Alteris
- CA Unicenter
Aladdin eToken PRO for pre-boot authentication
Integration of other smartcards via PKCS#11 (additional SafeGuard Advanced Security module required)
VOICE.TRUST server for automated biometric challenge/ response helpdesk

Interfaces

Scripting API to automate repetitive administration tasks

Standards/Protocols

PKCS#11
AES (256 and 128 bit)
Rijndael (256 bit)
IDEA (128 bit)
DES (56 bit)
Blowfish-8/16 (256 bit)
Stealth-40 (40 bit)

Language Versions

English
German
French

Borderware

MXtreme Secure Email Server

email is a business critical service make sure yours doesn't stop with MXtreme's High Availability and load balancing options. Borderware Mxtreme the only EAL 4+ certified email server.

Utimaco SafeGuard Easy

Laptop Encryption

Protect the data on your laptop with full hard drive encryption and pre-boot authentication using SafeGuard® Easy.

Utimaco SafeGuard Advanded Security

USB Memory Drives

It'll store 1Gb of uncompressed data, it's un-detectable and it's bootable. Read how to manage and control the use of USB Memory Drives and other Plug and Play devices

Utimaco SafeGuard PDA

PDA Encryption

Prevent unauthorised access to your PDA and encrypt sensitive data using SafeGuard® PDA

PasswordCourier

PasswordCourier is the industry standard for secure, self-service password reset and synchronization, featuring multiple options, robust help desk integration, and the ability to enforce consistent password policies for any system, application, or Web portal.