Utvärdering av lösningar för hårddiskkryptering

Sammanfattning: Information stored on unprotected computers that gets lost or stolen, and falls intothe wrong hands, can easily be accessed by moving the hard disk to a controlledcomputer, or by booting the computer from a removable medium, in order to getaround the operating system login. This is something that largely affects companieswhere customer information, trade secrets and other sensitive information can becompromised. A classic solution to the problem is encryption of individual files, but ithas some drawbacks as it puts a great responsibility on the users and unencryptedinformation can be left by mistake. A better solution to the problem is transparentencryption of the entire hard disk, i.e. that encryption and decryption of informationis performed automatically and without the user being affected. In this way allinformation is always protected when stored on the hard disk. The aim of this thesis was to evaluate five solutions for hard disk encryption in acorporate environment. These were Utimaco SafeGuard Enterprise, CheckpointSmartCenter for Pointsec – MI, McAfee SafeBoot Enterprise, BeCrypt Enterprise andMicrosoft Bitlocker. Their strengths and weaknesses were mapped and comparedbased on the following parameters: deployment, administration, scalability, security,performance and resource requirements. The result of the evaluation shows that SafeGuard and Pointsec have generally thebest conditions for supporting large enterprise environments. SafeGuard stands out ina positive way with a good solution for administration which makes it easy toconfigure clients. Performance testing of the solutions showed that hard diskencryption in most cases affects the performance very little after deployment.Bitlocker, however, was an exception and showed noticeable loss of performanceduring the benchmark test. SafeGuard affected the clients most regarding time forcold boot. The solution that affected performence least in general was BeCrypt.