|
Utimaco SafeGuard Easy provides fully automated encryption, transparent to the user, using the AES 256- and 128-bit algorithms among others. It dynamically generates keys from the pre-boot password relieving the burden of having to store keys on the disk. Encryption also kicks in during hibernation modes and authentication is required to regain access to the laptop. Herbst says deployment was straightforward and the product is centrally managed.
"You have to be flexible and be willing to adjust the criteria as you learn the capabilities of the solutions available," he says. "We talked to many different vendors and found you can learn from them and that may lead you to change your criteria."
One big selling point for Herbst was whether a product had sufficient data and disk backup and recovery capabilities; another was compatibility with the company's IBM-Lenovo laptops. Lenovo is a Utimaco partner.
"Any special compatibility with that platform was a plus," he says.
Full deployment took 11 months and was completed in November 2006.
DEPLOYMENT AND DELIVERY
Herbst and his staff had to overcome some hiccups along the way--most notably, some compatibility issues.
"I crashed my test system several times when first working with the product, which I consider part of the learning curve with new, complex products," he says. Utimaco support was critical to overcoming these issues.
One problem with the test computers turned out to be a corrupt Windows Installer that was not obvious until the IT department started installing the Utimaco encryption.
Another discovery was that when running Microsoft Outlook in cached mode, as Timken does, Outlook would hang up the initial installation setup. Herbst learned that keeping Outlook off during installation cured that compatibility issue.
"I believe the lack of [major] compatibility problems was partly due to the nature of the product, which should be application transparent, and partly due to the extensive testing I performed before deployment to work out any implementation kinks like the Outlook conflict," Herbst says.
Herbst says he also created deployment packages for different user requirements and provided training for IT support personnel worldwide prior to deployment. From there, the client services department managed the deployment process.
|