Endpoint Encryption

Hi all,

I’m looking for a suggestion on a full drive encryption solution my company can purchase for a specific project rollout.  We created an image of Windows Server 2008 which would be installed from scripts upon boot-up.  We want to deploy over 1,000 servers from the image stored on a hard drive, but we want to encrypt each hard drive with a unique decryption key.  The idea is that the 3^rd party installers do not have access to sensitive information stored inside the image.  Here is the process we want to follow:

1. Stage the hard drives at corporate
2. Ship the hard drives to a 3^rd party installer
3. 3^rd party inserts the encrypted hard drives into servers and ship them to over 1,000 branch locations
4. 3^rd party techs boot up the servers and they are asked for a decryption key before the image process starts.  Also, a unique sequence number comes up on the screen.
5. 3^rd party techs call our corporate and tell the help desk the sequence number
6. Our help desk provide the decryption key, based on the sequence number (via some database).
7. Techs enter the decryption key upon boot-up and then the scripts install the image automatically

Can anyone think of any existing solutions we could use to satisfy our needs?

Your input would be greatly appreciated.

Peter

Have you see Symantec drive encryption?

http://www.symantec.com/drive-encryption

Hi Peter,

From what you wrote above I'm not sure if I fully understand what you meant (in specific point 4.).
Are you looking for a product which encrypts the hard drive before installing the operating system?
Or some solution that locks the deployment image (the CD used to install the OS)?

Rgs,
dcats

I am looking for a product which would lock the deployment image that is stored on a physical hard drive.  The image kicks off the server 2008 installation and we need to protect some data stored inside the image.

We would like each hard drive to be decrypted with a unique key.

Thanks for the suggestion, I will research this product to see if it meets our needs. 

I have reviewed the Symantec Drive Encryption product.  I even downloaded the trial version.  This product does provide the full drive encryption, however it doesn't exactly do what we need.  It does not provide the question-answer authentication method I described in my original post.

Any other suggestions?

Perhaps Symantec does not offer such solution?