What's new in SafeGuard Easy 4.11 : Hard disk encryption for laptop

What's new in SafeGuard® Easy 4.11?

SafeGuard Easy's hard disk encryption, which provides base protection for PCs and laptops, has now established itself as an effective, secure and easily-maintained solution for thousands of companies, from small offices up to multinational groups. The latest version of SafeGuard Easy contains many new functions which, among other things, make central administration easier, extend the product's areas of application and integrate the latest technologies.

Download SafeGuard Easy

Extended support for IBM Rescue and Recovery™ (RnR)

SafeGuard Easy's extended support for IBM's backup and restore method means that backups from encrypted SafeGuard Easy systems can now be stored on all backup locations supported by RnR and not just on the local hard disk, as was previously the case. This means that, in an emergency, it is now possible to recover a system by loading a backup from CD/DVD, a network drive, a second internal hard disk or a USB hard disk or stick.

Same user password for SafeGuard Easy and Windows (password synchronization)

For many support staff, calls from users who have forgotten their password are part of everyday life. The rule is: the fewer passwords a user needs to remember, the less work there is for support staff. SafeGuard Easy's new password functionality helps to reduce user calls because the software can now be configured to make the Windows and SafeGuard Easy password the same ("synchronized") with just one mouse click. After successful synchronization, users use the same password to logon to SafeGuard Easy in pre-boot authentication and to the operating system.

Reuse of configuration files from older versions (from SGE 3.20 onwards)

Companies use configuration files if a large number of about clients are to use the same SafeGuard Easy configuration. In SafeGuard Easy 4.11 it is now possible to import the "old" configuration files, providing an easy way to reuse settings and keys during an upgrade without having to type them in again.

Emergency boot now also possible from CD and USB stick

Nowadays, PC systems are usually equipped with CD/DVD drives instead of floppy drives, and USB memory sticks have also established themselves as mobile data media. SafeGuard Easy has taken account to these developments in hardware and now also CDs and USB sticks as emergency boot devices1, alongside floppies. Boot media are supported both for MS-DOS and Windows PE.

Compatibility with Microsoft SQL Server

Using the optional central Administration functionality, information about SafeGuard Easy Clients is saved in a dedicated database. To ensure that customers have maximum flexibility when selecting the type of database they want to use, from this version SafeGuard Easy also supports Microsoft SQL Server alongside Microsoft Access.

Extended options for client registration

The current version of SafeGuard Easy optimizes the configuration options for the central administration database. Administrators now get tools with which they can, for example, change Client or Server names or add more Clients to the administration database2, which cuts down work for the administrators.

Support for new Aladdin token (eToken 64 K and NG OTP)

These latest variants of the Aladdin eToken are now supported for SafeGuard Easy logon, besides the traditional eToken Pro.3

SafeGuard plug-in for Aladdin's Token Management System (TMS)

The Aladdin Token Management System (TMS) is a tool based on Active Directory with which eTokens can be issued. From version 1.1 (released February 2005) the Aladdin TMS can be used to integrate plug-ins from third party suppliers. In this way Utimaco makes it possible to use a plug-in with which SafeGuard Easy (PBA) data and SGAS Windows logon data can be written on the eToken. The combination of TMS and Utimaco plug-in mean there is no need to use SafeGuard Token Administration for issuing eTokens, but both programs can also be used in parallel. The SafeGuard TMS plug-in can be bought separately. A 10-user demo license is supplied with SafeGuard Easy (it is available for download as well).

Deleting SafeGuard Easy data on the token

The SafeGuard Easy plug-in for Token Administration now provides new functionality with which you can also delete SafeGuard Easy data.

"Faster" user changeover with token

Users who use SafeGuard's token-based logon also benefit from another handy feature: if it becomes necessary to change the SafeGuard Easy rights profile on a multi-user PC (for example, to switch off the right to encrypt removable media), then the token users simply need to log off from Windows: there is no longer any need to reboot the PC completely or logon to PBA, as was the case before.

Note: It is important not to mix up fast SafeGuard Easy user changeover with the Microsoft feature that has the same name!

Standard Windows logon instead of SafeGuard dialog

After SafeGuard Easy has been installed, you now only see the Windows dialog displayed for logging on to the operating system. However customers can also customize the default logon and use a dialog that is based on the Utimaco design instead of the Windows logon dialog.

New 3DES (Triple-DES) encryption algorithm

From version 4.11, SafeGuard Easy supports another encryption algorithm, 3DES. 3DES is a development of the DES algorithm and uses a 168-bit key. This is seen as slower than AES, but secure, and is still used, primarily in the USA.

Extended authorizations for system restoration

Up to now the right to restore the SafeGuard Easy system kernel from a backup was restricted to the user "SYSTEM". From now on, any valid SafeGuard Easy user ID can be used to do this. Users can therefore perform a restore or similar actions personally, if necessary, without the need for a helpdesk staff member with "SYSTEM" rights to be present.

Compatibility with Windows XP's Volume Shadow Copy service

Windows XP's Volume Shadow Copy service creates an "immediate backup" of opened files or databases. This means that there is no need for staff to stop working while an administrator saves their data. SafeGuard Easy now provides full support for the Volume Shadow Copy service, so there is no longer any necessity to make changes to system configurations manually.

Note: as an alternative to the Windows XP copy function, users can also use other SafeGuard Easy-compatible tools such as Rescue and Recovery (which is also available for non-IBM platforms).

Improved compatibility with Asian Operating Systems

SafeGuard Easy 4.11 fixes some problems the previous version had with Asian operating systems or language settings and may now be fully used in these environments.

Optional extendibility

SafeGuard Easy is not a stand-alone solution. Benefiting from the wide range of Utimaco's product portfolio, the customer can extend SafeGuard Easy in many directions to meet their requirements. For example:

A web-based helpdesk interface with connected Hardware Security Module (HSM) for key management or biometric voice recognition via a VoiceTrust server offer additional helpdesk options, which are of particular benefit in large-scale environments.
Transparent file and folder encryption guarantees that data for working groups remains confidential on the network or terminal server.
The implementation of extended security guidelines, for example for access to PnP devices, exchangeable data media (CD/DVD) or certain file types, protects against unauthorized data export and import, and prevents computer viruses from being smuggled in.
Single Sign On (SSO) increases user-friendliness and reduces helpdesk costs. It can be implemented on almost every password-based application, locally, on the web or on the terminal server.
Small mobile devices such as Pocket PCs can also be protected just as efficiently using SafeGuard PDA, SafeGuard Easy's stablemate.

Aladdin eToken PRO

The Aladdin eToken PRO USB form factor smartcard provides two factor authentication at pre boot when used with SafeGuard Easy. The tokens can be managed using the Aladdin Token Management System together with the Utimaco TMS SafeGuard® Plugin, together this provides a seamless way to manage SafeGuard credentials in an Active Directory environment.

Aladdin eToken NG-OTP

The recent introduction of the new Aladdin NG-OTP token combines the tried and trusted USB form factor smartcard together with a One Time Password generator. When used with the Token Management System (TMS) this token delivers a more easily managed, better integrated, more cost effective and future proof solution for identity management than the traditional alternative.

Aladdin TMS

The Aladdin Token Management System (TMS™) is a robust management system that enables the deployment, provisioning and maintenance of all eToken devices, including security tokens, smartcards and ID badges, within an organization. It supports a comprehensive range of security applications such as network logon, VPN, web access, one-time password authentication, secure e-mail, data encryption and many others.