Full Disk Encryption Guide
Matrix42 Full Disk Encryption
Matrix42 Full Disk Encryption provides unmatched data-at-rest protection for standard hard disks via full-disk encryption. This chapter gives you an overview of the product, detailing why it has been created and how it works.
About Matrix42 Full Disk Encryption
Although Matrix42 Full Disk Encryption can protect desktop computers the primary use is for notebooks. The mobility of information is quickly becoming more of a success factor in daily business. Notebook computers fulfill the requirement of mobility and thus, may contain business-critical information. Unfortunately, a large number of notebooks are lost or stolen each year. In most cases, the information stored on those notebooks is much more valuable than the hardware itself. Companies and institutions are aware of the need to protect their data against unauthorized access even if the hardware is lost or stolen.
What is Matrix42 Full Disk Encryption?
Matrix42 Full Disk Encryption is a data protection solution for “data-at-rest”. This means that it will protect data from malicious intent when the computer is turned-off or in hibernation mode.
Matrix42 Full Disk Encryption provides strong authentication and protection for standard hard disks via sector-based Full Disk Encryption (FDE) and Pre-Boot Authentication (PBA). This provides perfect ‘turn-off-protection’, which means that the implemented security mechanisms provide the highest security for the operating system, as well as for the data – provided the computer is turned off at the time of theft. The optional use of a security token or smart card at pre-boot is the high-end solution for secure key management in conjunction with two-factor authentication.
What does Matrix42 Full Disk Encryption not do?
Matrix42 Full Disk Encryption does not protect the computer against data theft or attack once authorization to the pre-boot component is successful and the system has booted into Windows. The user or administrator is responsible for ensuring that Windows is adequately protected (anti-virus, firewalls, remote data encryption, etc.).
Matrix42 Full Disk Encryption characteristics
- Enterprise-wide deployment and remote configuration (for laptops as well as desktop computers) via policies or via the Matrix42 Data Protection Console.
- Easy-to-implement protection: Installation wizards help you through the installation and configuration.
- Transparent to the user: The end user only needs to authenticate to Windows via the Matrix42 Pre-Boot Authentication. Encryption/decryption tasks are performed on the fly in the background.
- Easy to configure and administrate: All aspects of Matrix42 Full Disk Encryption are controlled via the Control Center in the Windows Control Panel.
- Extendible to the highest level of security using PBA and smart cards as well as the ability to block unauthorized external media.
- Comprehensive HelpDesk and self-help recovery methods.
Offline Documentation
Online Documentation
The online guide is currently under construction. The chapters from the offline guide listed below are already online and are currently being expanded. Please note that links and cross-references in the Online Guide do not yet work everywhere.