File Share Encryption

Hi everyone. I know these are basic questions...I'm not a 'security expert'...I just have a small business from home and I'm looking for a way to encrypt my laptop running Windows 8.1.

I saw on the encryption page that Symantic Disk Encryption has a 1 year license for $110. http://buy.symantec.com/estore/clp/productdetails/pk/drive-encryption

I have a few questions about this:

1. I want to not only have whole disk encryption, but also be able to either have some type of file encryption or maybe some type of virual/partition encryption...that way I can have the computer running and 'unlocked', but still have more sensitive files/folders still encrypted in several files/partitions until I enter different passowords to unlock those...can this software do that? Or would I also need to buy something else in order to encrypt multiples files/virtual partitions?

2. It lists only supporting 8.1 Pro and Enterprise...I assume it doesn't support the base/home version of 8.1 for some reason? Not a major deal to upgrade to pro if needed, but if I can use it with the base/home version that would be great.

3. If you don't renew the license after the 1/2/3 years, what happens? Can I still have the drive encrypted and still create additonal file/partition encryption without renewing?

4. Any other advice for encrypting 1 laptop? I used to use Truecrypt on my old work laptop, but since that doesn't support Windows 8.1 I figured this would be a good alternative?

Thanks in advance to everyone.

Hi Mike5, 1. Apart from drive encryption (aka WDE), you have also Virtual Disks and Symantec Share Encryption (aka NetShare). There are several quick start guides for each main feature (email encryption, drive encryption, netshare,...) which can provide a useful and synthetic introduction about the features of the product. 2. It is an enterprise product that's probably the reason why it's not supported in the other OS editions. I'm not sure if it was simply not tested or if it's not expected to work in those flavors. 3. The licensing has changed thus I'm not sure how that would be handled by the product. I think that the drive would still be encrypted and you would be able to decrypt the files but probably you wouldn't be able to encrypt with NetShare or created other virtual disks. I'll need to check this better. 4. Two advices: - Backup before disk encryption. Backup is part of IT best practices but we usually forget that. - Depending on your security requirements and budget you can use the one provided by the OS and implement the other solutions (Virtual Disks and File Share Encryption, probably also email) with Symantec Encryption Desktop, for instance. HTH, dcats

Thanks for the reply. Just to try to clarify on a few of the points.

1. So you are saying that the product I mentioned, the drive encryption only does drive encryption and the other 2 programs would need to be purchased seperately? Or you were saying they are included as part of the drive encryption product license?

2. Alright, I understand. I just figured it would work with all versions of 8.1 since I don't think there is that much of a difference between the base/home and pro version.

3. Alright, so is there any difference between renewing before the 1/2/3 years ends versus just buying a new license after it expires?

4. Alright great.

Thanks again for your help.

Hi Mike5,

1. The same product can be enabled in different "flavors" depending on the license you use.
If you purchase a bundle, those are all features integrated in a single client (Symantec Encryption Desktop). See: http://www.symantec.com/pop.jsp?popupid=encryption-bundles

2. There might be enought differences for the product not work and, if you use an unsupported OS, you stay in an unsupported state.

3. Correction, as per TECH149025 - "Disk Encryption will automatically decrypt after 90 days".
The difference between the renewall and the new license I expect it to be the cost. I think renewalls are cheaper than new purchases.

What happens to the PGP software after a license expires? - TECH149025
 

HTH,
dcats

 

Hi. Thanks again.

1. Thanks for pointing out what each bundle contains. It looks like to have both whole disk encryption as well as virual file/partition encryption I would need to get the 'Encryption Desktop Storage' bundle? But at $215 for a 1 year license it's getting a little pricey for me. Is there a way to get a perpetual license where you can buy it and own it forever and only pay if you want updates?
 

2. Understandable. Thanks.

3. I would assume it would automatically decrpyt only after the password was put in to start the computer? Otherwise it wouldn't make sense if someone could steal a laptop and then wait till the encryption software expires for it to autoatically decrypt?

It's too bad there doesn't seem to be a simpler answer to encyption. I would love to just buy the software and be done with it, since on my old computer I just used TrueCrypt for free and that worked great, but it doesn't support Windows 8.1 yet.

 

The preboot authentication is a GRUB bootloader - it has no awareness at all other than what password you need to put in.

Mike, I suggest contacting your nearest partner rather than going direct to Symantec.  They will be able to get a better price for you, even if its just one license and can explain the license options in greater detail.

http://partnerlocator.symantec.com/

I was always under the impression the renewal is for support, not the actual product use itself.  All PGP products are perpetual.  Maybe the SME versions are different to Enterprise.  I thought the trial did the automatic decrypt, not an expired license.

Hello Mike5,

In reference to your query for License, you may use the licenses for years even after it has expired. Expiry of License would mean that your subscription/contract with the Licensing has ended and if in case you require to upgrade the product, one has to renew the subscription with the Licensing Team as a mandate.

Although you will be able to use the feature functionalities (which ever is applicable with the license) without any issues (such as disk encryption, virtual disk and Fileshare encryption) without the data being decrypted.